Information Security, sometimes shortened to InfoSec, is the practice of protecting information by mitigating information risks. It is part of information risk management.
Information Security, typically involves preventing or reducing the probability of unauthorized/inappropriate access to data, or the unlawful use, disclosure, disruption, deletion, corruption, modification, inspection, recording, or devaluation of information. Information Security‘s primary focus is the balanced protection of the confidentiality, integrity, and availability of data (also known as the CIA triad) while maintaining a focus on efficient policy implementation, all without hampering organization productivity. This is largely achieved through a structured risk management process.
—Wikipedia, “Information security”
A critical aspect of security in this context is that of confidentiality, integrity, and availability of data. All three elements must be maintained for information to be “secure.”
Voyeurs. Sabotaged accounts. Backdoor schemes. For years, the retail giant has handled your information less carefully than it handles your packages.
Amazon’s Dark Secret: It Has Failed to Protect Your Data Read More
Will cyber warranties better align incentives in the market for information security products? Or are they marketing tricks riddled with coverage exclusions hidden in the fine print of the terms and conditions?
Cyber Warranties: Market Fix or Marketing Trick? Read More
The National Cyber Security Alliance’s (NCSA’s) CyberSecure My Business™ is a national program helping small and medium-sized businesses (SMBs) learn to be safer and more secure online.
CyberSecure My Business Read More
The SANS Institute was established in 1989 as a cooperative research and education organization.
SANS Webinars & Information Security Resources Read More