What would be a good response back responding to this peer's discussion?

Security is both a technical issue and a business issue. There are many systems and tools that go into the technical side of security to protect the system from breaches. Some of these technical protections include things like firewalls, multi-factor authentication, an intrusion detection system, antivirus, and the actual patching of the software itself. Outside threats such as a hacker or malware can be subdued by these software protection systems to keep your system safe. Without these systems, you are leaving your devices wide open for any attacks or breaches that could harm your device and data. On the other side, security is also a major business issue, for if an attack were to occur a business's reputation can be badly damaged since customers are unlikely to trust them anymore. Having security issues may leave a business open to many issues such as financial loss and legal consequences. Companies are required to comply with privacy regulations such as the General Data Protection Regulation (GDPR) since companies are held accountable for protecting customer data. One of the largest aspects of security is the factor of human error, because even with the best software protections in place, simple mistakes can lead to a security attack. User behavior is just as important as technical controls since the acts of employees consistently locking their devices and having long, secure passwords is essential to the security of an organization.

References:

European Union. (2016). Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation).