Describe the reasons organizations have not adequately protected data.

The reasons organizations have not adequately protected data include: (1) Some companies view the loss of crucial information as a distant, unlikely threat. (2) The control implications of moving from centralized computer systems to Internet-based systems are not fully understood. (3) Many companies do not realize that information is a strategic resource and that protecting it must be a strategic requirement. For example, one company lost millions of dollars because it did not protect data transmissions. A competitor tapped into its phone lines and obtained faxes of new product designs. (4) Productivity and cost pressures motivate management to forgo time-consuming control measures.