Fundamentals of InfoSecintermediate
Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.
Answer
A complete answer explains that security requires ongoing attention rather than a one-time purchase. Technology provides controls, people operate and manage systems, and the environment includes relevant physical and organizational conditions. Changes in any of these can affect security, so safeguards need continuing management.
Explanation
### The concept
Security is described as a process because controls must keep working as systems and circumstances change. Technology can enforce restrictions or detect problems, but people configure systems, make decisions, and follow procedures. The environment includes physical and organizational conditions that can help or undermine safeguards. A strong answer connects all three rather than treating technology as sufficient by itself.
### What a good answer covers
- Security requires continuing attention, not a one-time installation.
- Technology supplies safeguards and technical capabilities.
- People configure, use, and maintain those safeguards.
- Environmental conditions can affect whether safeguards work.
Related Questions
- Which statement best captures the course review’s view of computer security?(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- A vulnerability is the method used to take advantage of a weakness.(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free