IT Manager's Handbook: Getting Your New Job Done

There's a ton of reasons for wanting to break into a computer system: the challenge of it, a shot at notoriety, revenge, and money are some of the most popular reasons. And of course, some do it just for kicks. Regardless of the reason, there's no disputing the fact that there are lots of attempts against computer security. Unlike football, where the best defense is a good offense, in computers a strong and vigilant defense is the only defense.
There is a simple but important distinction to make between the two different types of threats your company will face: internal and external. This section discusses the external threats; the next section discusses internal ones.
In the war of computer security, we generally think that the people who are employees of the company are "on our side" and the real threat comes from "outsiders." Often, however, reports are that the greatest security threats come from within. Of course, with the prevalence of remote access, the World Wide Web, intranets, and extranets, too often the difference between external and internal threats is more of a logical one than a physical one. The point is, your data, your networks, your infrastructure, and...