The security of any system or network is a combination of technology,policy, and people, and it requires a wide range of activities to be effective. A strong security program begins by assessing threats to the organization's computers and network, identifying actions that address the most serious vulnerabilities, and educating users about the risks involved and the actions they must take to prevent a security incident.