SUMMARY AND CASE CONCLUSION
Jason Scott finished his review of the company's information systems sccurity proce. dures and prepared an interim report for his supervisor/The report began by explain- ing that security one of five principles of systems reliability. Because absolute was security is not practical, te report noted that Northwest Industries' pol should be to adopt the time-based model of security and employ a combination of detective and corrective controls such that it could detect and respond to attacks in less time than it would take an intruder to break through the company's preventive controls and suc- cessfully attack the system. In addition. the report pointed out the value of deploying redundant, overlapping controls to provide layers of defense-in-depth. Jason's report then described and evaluated the various security procedures in place at Northwest Industries. Physical access to the 's office was limited to Jason Scott finished his review of the company's information systems sccurity proce. dures and prepared an interim report for his supervisor/The report began by explain- ing that security one of five principles of systems reliability. Because absolute was security is not practical, te report noted that Northwest Industries' pol should be to adopt the time-based model of security and employ a combination of detective and corrective controls such that it could detect and respond to attacks in less time than it would take an intruder to break through the company's preventive controls and suc- cessfully attack the system. In addition. the report pointed out the value of deploying redundant, overlapping controls to provide layers of defense-in-depth. Jason's report then described and evaluated the various security procedures in place at Northwest Industries. Physical access to the 's office was limited to