0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 About

Senior PaperTomhave 6

company decides that it is not a likely target to be attacked, they might as well forget

about implementing any security measures and start giving away client information.

For, in effect, this is what often ends up occurring. At this point, you may be asking

yourself "Why?". Another quote from the same source explains:"The encryption of a

single transaction doesn't guarantee the confidentiality of the networked computer on

which it is stored, just as a properly administered firewall doesn't ensure that there are

no other points of entry into the network it guards." (Power [1] 131)Simply put, if you

do not think about security when designing the whole system, you will likely overlook

an area that will then become a weakness to the whole system


Finally, it is necessary for security professionals to help bridge the gap between


business and technology. Because technology is always evolving, and because

hackers are becoming increasingly intelligent and sophisticated, it is the responsibility

of the security specialist to help facilitate communication between the business or

client and the technologists who are doing the work specified by the business or client.

I will use the phrase "bridging the gap" quite a bit in this paper in describing ways in

which we as professionals and educators need to work to facilitate change and help

equip other professionals for the future. At this point, however, you are probably

wondering what it means to "bridge the gap."Using myself as an example, I have

worked hard over my college career to develop a strong technical background, gain a

broad range of experience, and to develop strong communication skills. These three

characteristics work together to allow me to bridge the gap between the group of

people who I will refer to as "the business"or as "users" and the people who I will refer

to as "technologists" or "bit-heads."Bridging the gap means standing between these

two groups -- one that understands technology extremely well and one that doesn't

understand it at all -- and facilitating interaction, solutions, planning, strategy, etc. This

ties into the metaphor stated in the abstract by representing a facilitator who helps the