Chapter 1. Introduction

Part 2, Security for Individuals, is aimed at all computer users, from novices to experts and should serve as a primer on how to use your personal computer safely. Safe computing is possible, but it takes knowledge, vigilance, and care. The language in this section will include a certain degree of technical jargon; in general, some technical terms are defined in the mini-glossary at the end of Part 2; they also appear in the full Glossary in Annex 1 of this Handbook.

The first step in devising a security strategy is to understand what “safe computing” means. If you practice safe computing, you are seeking to ensure that:

• your data and programs will not be altered or disappear unless you request it;
• your computer and programs will behave the way their designer intended (with the exception of software bugs which are unintended flaws in program code);
• no one will use your computer, your data, or your network without your permission;
• you will not unknowingly spread computer viruses;
• you will not be annoyed as much by unwanted advertisements (spam);
• no one will watch every move you make on your computer;
• no one will capture any of the data that goes over your wired or wireless network;
• no one will steal your usernames or passwords on systems or sites that you access;
• if you enter credit card numbers or bank account information online, the data will be reasonably secure (at your end of the connection; obviously you have less control over what happens at the other end of the connection).

In the personal computer context, if you ignore security issues, the results can range from annoying but costless, to time-consuming and expensive. In a professional computing context, the problems caused by unsafe computing could jeopardize your business. In either case, someone must take responsibility for assessing the risks, developing a security plan, and executing that plan. Even with detailed knowledge of information technology (IT) security issues, you will not be able to control all aspects of your computing environment. However, if you follow the guidelines in this Handbook and survey the resources available to you, you will be able to minimize the risks and develop appropriate responses to the evolving world of information technology.

Covering all of the issues related to security for individuals would take hundreds of pages. Most people do not have the interest or time to read such a complete study. This summary provides the information required for a typical user to understand and implement a reasonable degree of security on his/her computer. At times, the material presented in this Handbook may over-simplify some of the more complex issues. The bibliographies provided in the Annexes offer references to print resources, electronic resources, and organizations that will aid the user in further study of IT security issues.