" I fully understand and share the concern. Reducing red tape minimizes costs and also reduces the chance for miscommunication and errors. Red tape can be detrimental to productivity. However, I can assure you that the recommendations in question are not red tape but are based on a sound understanding of the ramifications of insecure data. Insecure data could cost Southwest its relationships with clients and suppliers. Therefore, I urge you to consider the following information security issues before reconsidering my proposals.

Issue 1: Southwest's clients and suppliers are our most valuable assets. We have cultivated relationships with many of our clients and suppliers over the course of the company's existence.

Issue 2: Although I am relatively new at Southwest, I am not new to the field of accounting or to the field of information security.

Issue 3: Southwest's data is sensitive and vulnerable. At any time, a malicious employee, former employee, or competitor could obtain our records on suppliers, customers, inventory, and payroll. Securing Southwest's data is crucial to securing the future of the company.

Issue 4: Increasing information security involves relatively simple control procedures. At first glance, those procedures may seem like "unnecessary red tape." They will require some employee training. That training will be minimal, however, as the proposed security controls are simple, straightforward, and easy to implement.

Issue 5: No training session will be needed, as I will compose a company-wide memorandum detailing the new information security system.

Issue 6: I propose that the system be implemented gradually to minimize confusion and reduce the possibility for errors.

Issue 7: The control procedures will begin...

Passwords will be offered to trusted employees. This will not only serve to protect our data immediately but also to provide a clear means of identifying potential perpetrators of data misuse.
Issue 8: Please review the following types of data that could be compromised if stricter controls are not implemented immediately:

Client information: If leaked to competitors, could lose us our most valuable asset.

Supplier information: If leaked to competitors, could increase our operations costs.

Accounting information: If vulnerable to attack could entail malicious employees altering payroll data.

Company communications: If accessible or alterable, could lead to serious legal ramifications.

Client and supplier data is crucial to the future of our firm and it is our obligation to protect that information. Accounting data is also sensitive. The possibility of legal, ethical, and fiscal problems is too great to be ignored. Information cannot be physically guarded in a vault. Strong controls will eliminate the possibility that company data will be compromised.

Therefore, I urge to you to review the proposals for an information control system. I welcome any input you have regarding those controls, especially input that might improve the security of sensitive Southwest data. If you can recommend any other security control measures, we may be able to come up with a feasible plan that can be implemented immediately.

If you need to familiarize yourself farther with information security issues, I urge you to read the book I am enclosing with this memorandum. I look forward to working with you in the future as we collaborate on how to best protect Southwest and secure its market position.