The security of any organization should be a board issue as its
impact affects the organisations strategic position and brand.
Security has to be implemented in a top-down approach with the
board setting the tone, direction and tolerable risk levels.
The current security architecture of many Nigerian companies can
be likened to a house that has a wooden foundation, a glass wall
and a steel roof. This is one major reason why despite the recent
huge investments in information security by some companies, there
are still many "cracks in the wall" and security breaches
easily undermine such investments. What do we mean by this?
Let us take the financial institutions as an example. Over the
years many companies have been very reactive as regards security
because their security architecture was driven by the prevalent
security issues or regulatory requirements at the time. They
probably have never come together as a business to draw up a
comprehensive security architecture
