The purpose of this article is to acquaint business and data processing managers with areas of vulnerability of information systems and to present a security system framework upon which an organization may build and develop to suit its individual needs." Given the turmoil on college campuses, this article is particularly relevant for education. (Author/LS)