The chapter summarizes security approaches relating to hardware, software, and communications and identifies defense mechanisms for computer security, including physical security, personnel security, and the encryption of sensitive information. Organizations that use computers to manage and store sensitive information should identify a security coordinator and give that person responsibility for threat evaluation, security procedures, countermeasures, backup and recovery planning, intelligence, and security training. An appendix contains a computer security checklist.