Introduction: 

The very word, “cyber crime” has several distinctive connotations for system administrators who deal with a sense of sophistication and modernity of integrated systems, which pose umpteenth threats to enterprises which often nipping at the heels of surpassing security of internal environment. There are numerous security tools and programs designed through a large set of research processes aims at building a strong and secure environment for an enterprise to run with superior efficiency and maximum speed within the ambit of organization. Security planning becomes an annual event for each spheres of organization prepares for complete up gradation with the help of security analyzer and security tools meant to achieve superior successes for Enterprise security planning (ERP). With due course of time, the attack methods do change so as the planning and executing of security policy of organization undergoes a complete overhaul from top to button in terms of ambit of security to amend the curve created through different forms of attacks from external sources.

Day by day cybercrimeis becoming extremely critical with a series of black-hat hackers constantly augmenting their expertise in hacking enterprise accounts. Cyber crime is fast becoming permeating and it is spreading far and wide with newer means reaching to unbelievable spheres which many experts have never thought so in their wildest imagination. In the recent past, many big organizations like Microsoft, Apple, and Google have to bear the brunt of the strongest cyber attacks ever which surfaced from time to time to attack from unknown localities. Complicated matters are that these attacks are stealthier in nature which avoids detection for longer times by moving carefully to enterprise system and then remain for longer days and to continue stealing critical information from enterprises without a single person knowing about such attacks. All these create a sense of mistrust due to the sense of anonymity embedded in these attacks. 

Sense of ignorance from top brass is bad for overhaul enterprise’s security: 

Depending on the survey done by ‘Global state of information security', most of multinational companies (MNCs) are happy with their existing security products. It is then proved the sense of ignorance by top brass of companies in attending complete security cover of organization. It seems they are completely ignoring attacks on their systems which have longer remediation times. An objective view towards security is required to determine the scale of security of enterprises. Due to the speed at which hackers are developing newer technologies, it is evident from their expertise that day by day, they are competent on hacking and cyber attacking in big enterprises. Most of these enterprises till this day are spending very less in research and diagnosis for a completely newer secure environment for their organization. In modern times, sense of security has become a comparative matter. Security of enterprises runs within a clear reference point towards behavioral aspect of security and the mode of trajectory gives a definite level of inference for organizations to know more about possible breach of security in standard security practices. Security maturity model developed by HP entrusts organizations to look for what steps they have taken in order to migrate from risk factors to transformation, prevention and detection of the source of attack points. It empowers organizations to redefines entire security maturity model to check various nodes of attacks in the eyes of the attackers for possible detection through various trespass points. It asks every organization to go for more of an integrated approach and do away all such defensive attack mechanisms. Offensive security gives a sense of proactive security which provides clues of early detection of cyber attacks and most probably find out stealth attacks which buried deep under system settings.

Security maturity model: 

The security maturity model empowers enterprises to create step by step processes for complete security of enterprises. Five risk managements have been divided into five ability levels. The middle level is the degree of maturity which is event driven from self-unimagined events. Self unimagined events create out of virtual entities which are perceived as the level of cyber attacks posing from different attack-zones. It provides a sense of virtual reality driven through various challenges posing out from diverse unimaginable zones. Basic tools for security come out from reactive zones, which cover basic level of anti malware products. Layered tools help people to respond faster to imminent attacks such as phishing and stealth attacks. It empowers organizations to delegate powers to the hands of people to react sharply to surface attacks and defuse it before it spreads its wings to different departments of the organization. The third level of security consists of integrated tools that correlate with common management of contextual security environment that empowers users to work with maturity with altered levels of sophisticated cyber attacks. It works in an event driven manner against security attacks. It is perceived as the series of imagined events that occurs at a different set of contextual parameters within a consignment of the security environment. The fourth level of security approach is proactive security which identifies and remediates risks even before it surfaces and it does wait for security updates. It works automatically in retrospective matrices to give security in a faster world. In a world of internet, where everything runs with smart technology; response time for external attacks is very few. These attacks can be controlled through “data execution prevention” (DEP), “structured exception handler overwrites protection” (SEHOP), “Address space layout randomization” (ASLR) and “certificate Trust”. All these methods consist of advance methods of analytics in understanding potential attacks originating from external sources and management of internal system settings. 

Defense in depth: 

Basic tools of defense consist of perimeter-protection, intrusion-detection that identifies suspicious network activities. Intrusion prevention system (IPS) does not prescribe network-reconfiguration. It is a great technology to protect against dynamic new vulnerabilities. IPS focuses more on specific system settings and carefully guards against each executing processes that include system files, executive files, external application. IPS stops exploit before it is executed. It runs on simple formulae of scanning of all files from booting to load on the operating system. Enhance mitigation experience-toolkit (EMET) from Microsoft Corporation is an excellent toolkit which provides deep penetrative protective techniques that guarantee complete guard against stealth root kit and phishing attempts. All these seem to be good for organizations with a very limited information technology (IT) professionals. There are various malicious exploits in various sophisticated network defense, which varied with various attacks that need immediate attention to enterprise network defense. Enterprise resource planning (ERP) consists of system, network, application and data transmissions. It requires ‘defense in depth’ to continue running on an enterprise network unabatedly and without interruption. For few organizations with interruptions of a few minutes incur can compound huge loss. Android have introduced data encryption for free in its basic models and it guarantees a high level of security. Even if, attackers succeeded in trespassing to database, but still all data there could not be recognizable in terms of bytes due to data encryption of warehouse. In this way, even if all data are lost still attackers will not be able to retrieve the information. BitLocker from Microsoft provides tools for cryptographic processing through simplified encryption key management.

Proactive security tools within corporations: 

Log management of the entire set up of system processes provides a tool to review entire administrative security. It consists of log management, log collection, reporting and achieving of different regulatory compliance mechanisms. There are some log management applications that provide various tools to analyze automatically log-set of log collections. In a big enterprise, manual analysis of log collection is almost impossible and there is every possibility of genuine human errors. Therefore it becomes of immense importance that companies should seriously look beyond traditional security models. They should search for a common denominator of security impetus tools which can go beyond basic parameters that can pose vulnerability to different cyber attacks. Enterprise should look for clear integration of different security nodes such as correlation, situational context; integration that can automate analysis and reporting through user’s identity, authorizations, and reputations to protect it from denial of service (DoS) attacks for far greater protection than traditional security tools. There are many potential threats arising out from different sources for substantial business models. Security threat is dynamic phenomena and it needs to be managed and prioritized everyday for smooth functioning of business models. Applications are mostly critical for running a business.

They are the interface of connectivity between company and client. It is mostly vulnerable. Applications are weak links of organization. Attackers exploit critical vulnerabilities within the application and try to gain administrative privilege by explicating different code hijacks surface within perimeters of applications. Proactive security tools within corporations create a complete assortment of applications for vulnerabilities, threat assessment, information technology (IT) governance, identify application vulnerabilities and shut down easy entrance point for attackers. It goes beyond the traditional method of security tools. It scans external points which might pose dangerous for applications. Legacy applications continue to run within organizations and organizations have failed to remove these applications due to incur cost factors. In order to preserve legacy applications, organizations should contact enterprises security solutions provided to top security vendors. They provide speedy delivery of patches even before the original software vendors patch it and send it through cumulative updates. Time to time takes a close look at disgruntled employees who can deliberately pose higher security risks for companies through leakage of official secret information to competitors and hackers. 

Watch out for in-house threat perception coming out from disgruntled employees: 

Implement predictive security in organizational spheres of financial services and health care. It is important to understand in-house threat perception coming out from disgruntled employees and watch them out closely through monitoring of internet, behavior analysis and strict vigilance of phones and other communication mediums. How much security is adequate? It is important to observe strict vigilance within organization, but simultaneously one should consider deeply about how all these aspects are going to impact heavily on the productivity front. Too much of everything is bad and this one should reconsider these phenomena of what is enough for security. It is wise to compare and engage with further developments that can bring about too many implications and moral high grounds for organizations in times of contingencies. A successful business venture runs with idioms of profit and growth. If both runs with positive sidings it gives greater transparency and further advancements in terms of logistic planning and execution of ideas for possible further developments.

In order to attain these standards; companies need to be agile, innovative and futuristic. Further; all these can be turned into a sense of negativity when companies fail to secure intellectual properties, data, intelligence, services and privacy of customers. Above all; for a successful organization, the top priority is to make one of the most secure environments for clients. Brand of a company is priceless; it builds with time and precision to serve customers through gradual development of customer service managements. If security of privacy of consumers is compromised, then slowly, companies have to face greater risk of reduction of brand image which is irreparable. Enterprise security is slowly becoming a gigantic monster for administrators. Slowly, the perimeter of enterprise security is expanding further towards mobile and cloud computing devices. With the advent of Android, Windows Mobile and Apple, enterprises are offering their services through numerous applications. With the introduction of cloud computing; always on connectivity is providing consumers’ higher time to log in to website and order their products. On the other hand, it is opening wide scale parameters and unlimited perimeters for companies to manage and watch different attacks coming out from anonymous sources. It provides greater challenges and stricter time for administrators to manage enterprises.

Beware of ‘device risk’ of stealing much device information: 

Enterprises is now facing troubles from hackers of different kinds such as organize crime gangs, social hacker groups, hackers backed by some countries. All these are professional attackers and they have been funded wisely and healthily from diverse sources. In earlier periods, most of the attackers are from amateurish groups and ill-conceived computer experts. Many rival companies’ spy also part of this attacker’s group. All these threats pose security threats to company. Security threat should be considered in line with the physical and financial threat of companies. In fact, the most dangerous threats of companies from among three threats are security threats which not only bring about financial loss as well as permanent loss of brand ships. Security of confidentiality of customer data is important. Data privacy of an individual is backed by strict legal provisions and companies have to secure these data at any cost. Failure to secure privacy of individuals can make imprisonment for administrators and ending their long terms and strong career permanently. This is important for companies who are dealing with financial records, credit card records and medical records of customers. Multinational companies have to comply with legal provisions of different countries, provinces and local units. Companies should seriously consider in implementing regular compliance audits to determine discrepancies among different units. Mobile devices enable more flexible working conditions and enhance productivity but there are many challenges to monitoring within corporate perimeters. Some bigger enterprises have started creating free Wi Fi zones for employees to monitor activities coming out from mobiles and tablets. Without adequate device protection and knowledge, there is every chance of a free pass to malwares from device use through ignorance of employees. Android mobile devices should have a good antivirus which should be free from the company to its users. 

How to minimize mobile ‘application risk ‘: 

All these measures have possible privacy implications on employees’ freedom. There should be strict adherence to policies implemented by enterprises for their employees so that never ever such difficulties of implementation of such principles within different spheres of employees will arise at any point in time. There should be stringent instructions for employees to install applications from recognized sources. Many third party applications have malwares which creeps into the system from the domain of applications and pose havoc inside centralized data structure of organizations. In this way, employees can be warned beforehand, by using specific applications for day-to-day functionalities. All mobiles should be connected with wireless access network (WAN) so that strict regulations can be properly implemented. In this way, hackers can be stopped from compromising corporate security. There is difference between corporate data network and cloud service network. When the organizations run within either of these two networks, the nature of security varies completely and distinctively.

Organizations depending upon cloud providers depend heavily on reliability of cloud-based company and physical security of cloud servers. With cloud servers’ organization has always access service and the network remains alive even during strong natural calamities. On the other hand, there are various security concerns for cloud servers coming out from different zones. Organizations can check for procedures, proprietary services, terms and conditions of cloud servers companies before hiring them. It is better to check out for indemnity clauses of cloud servers companies before hiring them for your organization. Organization should control and manage encryption keys and carry out different mechanism to secure data encryption while using cloud servers. Ultimately, enterprises are responsible for security of data from customers and for this they should be extra careful while hiring cloud servers. Various big hardware manufacturers are hiring cloud hosting companies such as IBM (International Business machine), HP (Howard Packard) for seamless integration of data mining within the organization.

A stricter vision control document to regulate internet behavior of employees: 

It is important for enterprises to determine clear cut policy guidelines for customers’ cloud services such as Drop box, Google drive. There should be two step authentications for every customer in order to provide stricter security for applications. It is important to block use of consumers’ cloud services. In order to have stricter control over data and privacy controls. There is every chance of breach of confidentiality of corporate information might be hijacked through the use of consumer cloud services. Enterprises should incorporate stricter internal regulations over internet behaviors of employees within and outside boundary of organization. Enterprise must formulate stricter vision control document and every employee should observe and learn about it and should follow these guidelines one by one in order to prevent phishing of data from within the organization. An internal threat poses extreme security risks for confidential security information. Enterprises must look for internal and external threats reflecting upon organization by implementing offline and online mechanisms to stop the intrusion into privacy of corporate data centers. Organizations should make a strict watch on behavior analysis of employees and if it is found any such malicious activities from any nodes of organization, all these can prove to be an indication of disgruntled employees working with evil intention for companies.

Every company must determine a part of their fund for security investments. There should be proper mechanisms and reporting authority within organizations to examine how securities within organizations are working at the behest of security investments. Security funding needs to be investigated in accordance with investment and budget distribution within organizations on a priority basis in order to foresee future attacks upon organization. Many organizations go for software security solutions in order to create a snapshot of an entire server. It is better to go for composite security management which provides a holistic approach to entire IT assets by allocating security funding comprehensively through the process of the mitigation of security threats. Security is a continuous process and every enterprise should not fall behind existing security trends otherwise there is every chance of organizations falling apart due to attacks from all fronts from different hackers. A security assessment of an organization is like creating insurance for the company. It goes on with different level of detecting many of the problems, in finding out trends of security and implementing security policies and detecting various levels of intrusion points to formulate a continuous security policy to enhance security within organizations. 

Factors of interaction with external audiences and prospective customers: 

Considering the level of protection for electronic data, physical assets, the scope of its perimeter has to be determined. For enterprises, the single most important factor comes out from its perimeters of areas from where the organization and its wings are spreading in works. Detection of organizational boundary such as mobile apps, offline, online, customer support, advertisements and so on are single most influential factors of interacting with external audiences and perspective customers. No one knows in the guise of customer, anytime hackers can gain significance on your system and try to install stealth malwares to steal important confidential information. Every open node to communication can be termed as the perimeter of the company. Strict measures should be deployed in order to have proper care of enterprise’s administrative and data units. Even in ancient times, when there is no computer and no concept of saving electronic data, still that time valuables are kept within the boundaries or underground in order to keep out from prying eyes from lurking into.

Now, there is pretty much importance attached with data and its security and day by day there is vast increase of flow of data from amongst various sources such as social media marketing, information sharing, information gatherings, and smart phone cloud services and so on. Attacks are now becoming faster and sophisticated; there is urgent need to establish strong and continuous security mechanisms for organization. Many organizations are spending lavishly in keeping perimeter of organization safe and secure. Continuous analysis of logs of administrative process gives proper detection of abnormalities from within the organization and in this way the entire functionalities can be thoroughly checked in and grudge and rogue elements can be checked before it is too late for organizations. Most businesses are throwing a huge sum of money for security at the perimeter of an organization, but they are not making thorough attention to the internal security of the perimeter. According to research once hackers intrude organization, the average time to exploit data center is 416 days. It goes on to show. Organization has far greater response time to secure internal security from within its perimeter and for this it is essential to create sustained and strong security mechanisms from within enterprise limits.

Actionable security intelligence to investigate and create research within organization: 

There are numerous schools of thoughts who are presuming an alternative approach to secure entire information technology (IT) infrastructure. It advocates, constructing of a proactive security measures in order to attack hackers from the point of execution. It aims to go beyond the traditional method of security and wants to search and destroy malicious codes from different segments of the Internet before they are completely distributed. Every organization should have in-house security investigative agencies to find out information about persons or organizations who are giving away something to uncommon enterprises. Enterprises must have a confidential report about such people and it is duty of every organization to black list of those people and in this way, spreading of manual information gathering through professional stealth hackers can be assimilated before they actually happen. All these attempts need superior security performances such as reports, infiltration, approach, discovery and capture. All these are a series of processes which every big enterprise must obey and carefully follow in order to spread security network from beyond the boundaries of an organization. This approach needs to be based on intelligence gathering and research. It needs proper identification of different entry points and behavioral analysis of individuals and competitive organizations.

Scanning of peer-to peer network can reveal information about individuals dealing with scams. Fraudsters and phishing attempt and can reveal more information about them. It needs actionable security intelligence to investigate and create research within the organization to find about different spheres of security which can have alternative spheres in determining different forms of actions and reactions. Organizations should always be concerned with every indication of abnormalities and should straightforwardly find it about the way to see the entire sequence of events. It is a continuous way. Enterprises should observer networks across the Internet in order to stay one step ahead of the attackers at any cost. Many enterprises run with “zero day vulnerabilities” which can be experienced with various software flaws in applications and server. These security flaws can lead to cyber attacks and compromise the security of an organization. Enterprises needs to install software from reliable software vendors who are releasing time to time software fixes and culminating updates of “zero-day-vulnerability”. Think twice before installing multimedia flash and Java products which are marked with perpetual software-vulnerability. All these next generations’ data flows should be carefully followed to find out the real perimeter of organiza. 

Concept of bring your own device (BYOD): 

Information technology infrastructure has paved the way for a safe passage route for many security experts. They think of it as the golden opportunity for administrators to track employee’s behavioral patterns through certain distinct administrative principles. In every organization; there are many such rules which may intrude individual privacy but can become a boon for the enterprise to be a watchdog for administrators to scrutinize behavioral patterns of employees. It is the concept of “bring your own device” (BYOD) which empowers individual employees with continuous connectivity which works in favor of increasing productivity as well as continuous surveillance on the part of system administrators. In the earlier phases; companies do not let their employees to use mobiles while at works. There are strict vigilances on the part of companies to do away with such practices.

Sacred information: 

It is important to convince employees to shred some part of private information such as sharing of profiles and logs as these should be considered as “sacred information” for betterment of security of organization. All these settings should have administrative rights and employees cannot alter and change it on their own by using their mobile devices. In this way, the whole set of infinite data flow towards corporate networks can be easily managed by a different set of data restriction policies and identical data can be revoked in order to streamline network servers. In this way, enterprise does not have to invest heavily on mobile devices, as with implementation of BYOD policies, enterprise can get back a huge sum of the return on investment (ROI). So, all these mobiles devices need to be incorporated into BYOD policies and owners should be strictly informed about new set up rules and policy guidelines implemented by organizations from time to time. 

Some drawbacks of BYOD: 

Simple neglect in implementing these policies can bring about mass exodus of corporate data to outside agencies. You are never sure how this information could galvanize and disappear from corporate network possibly through different mobile channels. A simple auto synchronization options in email client within mobile operating system of an individual user can send out a large chunk of corporate correspondence to separate servers. With the advent of Android, everything is currently in the cloud and with newer auto synchronization feature every part of data is being synchronized continuously without user’s intention. All these are vital drawbacks of BYOD and corporate leaders should segment corporate and native data and should use stronger encryption mechanisms in order to protect data even if they are approved by attackers.

All devices should be configured over the air to maximize speed and efficiency of discrete devices. Over the air configuration is done through direct Wi Fi or Wi Fi connectivity which keeps a vigilant eye on users all the time. Data generation points such as virtual private network (VPN), nearby devices, native application and general data sharing applications aims to secure corporate documents and content with a string of information already embedded within specific information from input of company’s affairs. With the advent of mobiles and increase of perimeter of organizational business, time required for wireless single and uniform wireless connectivity among different segment of employees. In a company, there are different sects of employees such as office desk, marketing, services, logistics, human resources, information technology and so on and all these employees are difficult to connect through intranet. For example a common software or data usages policies should be established from among all units of the organization and these should automatically warn employees when data usages limit is reached. In this way the organization can throw stronger data security policies to drive out other forms of misuse of resources from within the organization.

Creating a sustainable economic model of development through proper BYOD policy guidelines: 

It is wise on the part of the corporation to provide self-service to employees in certain administrative functions. It works in both ways. In the first way, it reduces the number of basic administrative functions of system administration by minimizing lagging time from within the organization. Secondly, self-service such as resetting passwords, when the password is lost, introducing geolocation services for lost devices and able to wipe out data of lost mobile remotely so as to minimize time of response time of hackers to steal data. If these functions are not to be provided with individuals than in the case of stolen mobile, they have to report to the administrator and this takes huge time and during such case, time factors are significant. In this way, employees are empowered to function certain precise administrative actions which are good for the corporation in case of such urgent times. Otherwise employees will be limited to use mobile for “emergency call only” functionalities. Proper BYOD (Build your own device) policies not only save corporate data from prying eyes of hackers, but also make it safe and through implementations of constant security software and security practices. In this way, administrators have clear cut power over corporate data within mobile devices of employees. Administrators can seriously wipe out all relevant corporate data from outgoing employees’ mobile devices. Even if you are not paying for internet, still you can track employees’ geolocation. 

Stop misuse of BYOD from within organization: 

There are so many paid applications which some workers do not wish to buy it. They jailbreak Apple devices or root Android powered devices for installing paid application for free. Jailbreak or rooting of mobile devices lead to opening of the flood gates of malwares into devices and this can be dangerous for security of corporate data. Administrators should detect such devices and should wipe all corporate data immediately from the device in order to stops malwares from entering into the system. With the advent of Apple and android, users can easily install additive game like “temple run” and use it as office hours. Administrators should carefully look these behavioral aspects of specific employees and delete such time wasters before they spread into different segment of behavioral patterns of employees. Time to time, Android and Apple updates operating system and warn users to update it. It is up to the discretion of users to update at their convenient time. In this way, corporate can look beyond and find about pros and cons of different set of newer functions and can check and verify whether such devices would have better use for employees for better implementation of BYOD. With the advent of BYOD shifting of purchasing and managing devices come under employees as this can create a proper sense of the return of investment from among employees. It eliminates the cost of device purchase and management of devices. In this way, company can offer better network management functionalities to its employees in order to create a continual connectivity.

The role of integrated systems and big data analytics to create work-load optimize system: 

The principal process of acquiring, retaining and growing customers is as ancient as the beginning of commerce. During ancient days, when there are no monetary exchanges for business transactions, in those times, performance based exchange method such as the barter system was put in place all over the world. It creates a long standing bond between consumers and many customers it becomes a bond for generations. Creations and retention of faith in these exchange services are paramount and this principle is viable even today without any mince of words attached. Greek philosopher Heraclitus said that "You cannot step twice into the same river". It is said even today for enterprises when they opt for various security solutions. One needs to consider inward and strengthen all possibilities to inculcate virtuous traits of successful security solutions and bring back in a united manner so as to make every aspect of organizations secure and safe. The channel of communication has been on the rise from manual conversation to internet, social media marketing methods. Customer expectations from enterprises are on the rise and in these enterprises need to evolve and create a sustainable maintenance of the server and reduce log in lagging time. It does include the advent of workload optimized system to adjust itself from a different set of heavy demands from consumers. Generally, too much security spoils the bean. But enterprises have to implement a sustainable security measures in their integrated systems, in order to preserve privacy and data. Access security measures slow down the server and incidentally slow down response time.

It does not augur well for bigger corporations. Workload-optimized system with an effective technology provides perfect analytical solutions. The role of integrated systems (IS) in analyzing big data analytics (BDA) goes through the latest technology trends compiled with customer analytics make a leading work-load optimized system. Addition of business intelligence services, security framework, broad band networking, BYOD and business and customer analytics, enterprise log files, makes a fact sheet of external and internal events based on the appropriate distribution of different services. It creates scope for innumerable unchallenged opportunities for organizations through deployment of business analytics from the tangible benefits arising out of exceeded expectations. It secures all viable routes of consumer transactions through proper implementation of diverse security ideas and speedy performance improvement. In order to improve better customer relationships management;, organizations vouch for a different set of ideas and channelized different behavioral aspects of customers in order to improve personalized interactions. Consumers are not homogenous; they show distinctive traits such as patients in case of a health care unit, students in case of educational institutions and so on. Through the acquired process analysis, enterprise can prioritize the need for consumers and can set numerous agendas as a result of such tabular distribution. Through this behavioral segmentation targeted consumers can be reached out and served better through unique custom-made solutions. Brand awareness is the biggest challenges for enterprises.  The nature of most business shows most companies is more over searching for any opportunities to stay ahead of the race from amongst different competitors. They can get to any such extent to reach any point of surpassing market leader of any segment. For this, it is essential for enterprises to adopt a stern but system optimized security solutions. 

Conclusion:

Organizations can be a significant contribution in educating its employees and enhancing their technology-knowledge beyond any boundaries. It creates a secure system as workers no longer feel alienated and they know if they work for good then they will be felicitated with more monetary increments and for this the manual security breach of company remains null and void. It makes a scope for new found expectations as a result of all these incentives the security perimeter of organizations slowly becomes a prohibited land for external attackers. Slowly, the company adopts employee first approach and creates virtual cooperative units from amongst different segment of workers. This builds trust and confidence among employees and they go for complete success by going for extra miles in securing maximum profits for the organization. These enterprises are known as social enabled enterprises and it creates trust from within and that becomes embedded within the organization at different spheres of life and interaction with customers.

Every employee becomes a watch dog and stops any such malicious attempts by intruding basic security organizations. Social enabled information technology supports languish a positive outlook on enterprise and it creates a community driven security parameters for all walks of enterprise. Organizations are keen to harness power of big data. If above mentioned security measures are not considered seriously than the value of big data remains null so far there is a proper implementation of strong security for data on individuals. Effective information integration and proper security governance protects sensitive information which is part of big data servers of enterprises. Data protection is supported by law. Sensitive data are everywhere. Data in systems are being used by many third parties. Security concerns arise from data transmissions. These are few security fundamentals which most organizations should adhere to and go for implementing in their own customized approach in accordance with critical business operations and reporting.