business processes and management techniques are a central part of any information security strategy. Given the dominance of IT, technical computer security is also a very important component of information security.
One reason for continuing security failures is that it is often difficult to connect security measures to business priorities and thereby gain sufficient management and employee attention.
Good practice suggests that management should assess the risks surrounding information and balance the costs of security measures against the possible impact of security failures. However, the difficulty of quantifying these matters limits the effectiveness of structured decision-making processes in practice.
Finally, as security failures increasingly impact on individual consumers and citizens, there is a developing regulatory agenda, particularly around the security of personal information. As a result, a business may need to shift its thinking from internal risk management to meeting external demands. (1)

Network intrusions are widely viewed as one of the most serious potential national security, public safety and economic challenges. Technology, in this case, becomes a double-edge sword. “The very technologies that empower us to lead and create also empower individual criminal hackers, organized criminal groups, terrorist networks and other advanced nations to disrupt the critical infrastructure that is vital to our economy, commerce, public safety, and military,” the White House says.

It appears that risk to national and global security recently linked to the resilience of critical infrastructure may be another change to the social context that warrants examination of the relationships among stakeholders, as a CSR construct. http://searchsecurity.techtarget.com/Understanding-the-balance-between-privacy-and-security Retailers have collected data on