Preparing for the Worst: Creating and Implementing an Information Security Plan

As our information systems grow more complex and we rely more on the electronic storage and transfer of information—in everything from banking to medical records to library accounts —the risk of damage, loss, and even fraud increases dramatically. What information needs to be protected, and how do we go about doing that? This paper describes components of creating apian based on your company or department's needs and available resources.