Читать книгу You CAN Stop Stupid - Ira Winkler - Страница 49

The road to business hell seems to frequently begin with, “Nobody would bother attacking me.” We once heard this from the CEO of a credit union that had assets of “only” $20,000,000,000. His thought was that criminals would go after bigger banks. While this is clearly an extreme case, every organization has some people who believe they don't work with anything of value that people would target.

Many people don't realize that a seemingly inconsequential computer or website can be used as part of a botnet to serve malware to others. The location of the computer is irrelevant to the criminals. Excess equipment may seem outdated, but such units frequently contain hard drives that still contain sensitive information. Printers, for example, might have a copy of every document that they ever printed.

Clearly, successes are critical to protect. However, even failure can provide valuable data to potential attackers. In research and development environments, knowing the details of your failures can show your competitors where they should not waste time and effort in their own endeavors. In a sales environment, even rejected proposals can give a competitor an idea of your pricing structure and methodologies.

As you begin to create your business case, it pays to consider how your threats look at the value of your organization. It helps to understand what is actually at risk. It might also help you more completely determine what is truly valuable to your organization. Every so often, it pays to refresh your perspective regarding what you have to protect.