How information security has been evolved? This article discusses the meaning of the topic. As a result, you can have more knowledge about this study.
How Information Security Has Been Evolved?
Information security is the protection of information. Also, it is from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording, or destruction whether intentional or unintentional.
It is an umbrella term that encompasses those activities designed to protect information from such threats. Also, information security may be to both computer systems and paper documents.
The term “information security” is commonly used as a synonym for data security and sometimes for computer security. So, information security has many facets including confidentiality, integrity, authenticity, and availability.
Information security has been the prevention of unauthorized access to information systems. Also, the preservation of authorized access to information systems to provide confidentiality and integrity of information.
The US Department of Defense describes it as the “protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction.”
A slightly different definition is by the ISO/IEC 27000 series of standards:
Information security” means protecting information and information systems from unauthorized access, use, or disclosure to ensure they are available to those entitled to use them.
Information Security Features
The following are some of the main features of information security.
Information Security Policy:
The organization should have a policy on information security. Also, the policy should be clearly. It should be by all.
The organization’s management should approve it. It should also be to everyone who is in the organization’s operations. It should be periodically.
Information Security Training:
The organization’s employees should be in information security. Also, they should be before they start working in the organization.
The training should include topics on information security. Also, it should cover the risks connected to information security. So, it should cover the steps to take to prevent such risks.
Information Security Policy Training:
The organization’s employees who are responsible for formulating its information security policy should also be trained. Also, they should be on information security policies.
They should know how to formulate policies that are good for the organization and its operations. Also, they should know how to advise management on taking decisions about information security policies.
Information Security Policy Auditing:
The organization’s information security policies should be audited. Also, they should be periodically audited. The auditing process should be in the policies themselves. So, it should include steps to take after a security policy has been audited.
Information Security Incident Handling:
The organization’s employees who may be by information security incidents should know how to respond to such incidents. Also, they should know how to report information security incidents.
Information Security Incident Response Plan:
The organization should have an information security incident response plan. It should also identify the parties involved in responding to information security incidents.
Conclusion
Information security is the protection of information from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording, or destruction. It is part of the broader discipline of information security.
