I. OVERVIEW
Every corporation has a responsibility to itself, to its clientele, and to society in general, to exercise good control over its information systems. Internal operations rely on accurate and timely data and information; personal data about employees and clients must be kept confidential; much of the corporation’s competitive position may depend on controlling the information it has. All these, and other factors, imply that a corporate security plan is an important element in the proper operation of a firm.