Introduction

Be aware that no system is secure. The best you can ever hope for is secure enough. As such, good security is an exercise in risk management. To manage security well, to need to understand the risks you are exposed to, their impact, the possible mitigation strategies available to you and the costs of such mitigation. Your business can then decide on what level of risk it wants to accept.