|
Controlling IT Security is the process in which Secode helps your company take control of the IT environment and thereby protect your company’s logical assets. The figure illustrates how a company’s logical assets are constantly vulnerable to threats. Illustration of threat, risk and security 
Source: Swedish Standards Institute (SIS) A threat is a potential violation of security. Risk measures the probability of a threat occurring. Vulnerability means weakness to threats. Security, then, means minimizing the vulnerabilities of anything of value (assets and resources) through protection. But even with protection to a threat, there will always be a remaining risk. Taking control of this environment cannot be done with time-limited consultancy projects alone. Even if the security level is correct at launch, the IT environment constantly changes, and so the security level starts to deteriorate. Controlling IT Security means realizing that security must be a continuous process. | 
