Great, now let let's get started with the actual definition of information security, information security,
sometimes abbreviated as infosec, is a set of practices intended to keep data secure from unauthorized
access or alterations, both when it's being stored and when it's being transmitted from one machine
to physical location or another machine on a different computer.
You might sometimes see it referred to as data security, as knowledge has become one of the 21st century's
most important assets.
I hope you remember as its efforts to keep information secure have correspondingly become increasingly
important now because information technology has become the accepted corporate buzz phrase.
That means basically computers and related stuff.
You will see sometimes information security and cybersecurity used interchangeably, though strictly
speaking, as I already told you, I would differentiate between these two terms.
Cybersecurity is the broader practice of defending IP assets from attacks and information security,
the specific discipline under the cybersecurity umbrella.
Now, obviously, there's some overlap here.
You can't secure your data transmitted across an insecure network or manipulated by a leaky application,
as there is plenty of information that isn't stored electronically that also needs to be protected.
Does it for securities fraud?
It is to necessity being the security perspective to make it broader and available for every organization.
Information security determines what information needs to be protected by.
It should be protected, how it should be protected, and what the information should be protected.
These four questions are very important when it comes to information security.
What information needs to be protected?
Why it should be protected?
How and what now are protecting the organization against threats and vulnerabilities?
Information security reduces the risk and the impact to its asset through a risk assessment.
Threats to assets are identified, vulnerability to a likelihood of occurrence is evaluated, and the
potential impact is then estimated.
Now ISO IEC twenty seven thousand five.
That is the information security risk management.
Information security is the preservation of confidentiality, integrity and availability of information.
In addition to this, properties of confidentiality, integrity and availability, accountability,
authenticity, authorization, non repudiation and reliability can also be involved.
But ultimately it comes down with a triplette of the CIA.
That is, the confidentiality, integrity and availability of information security is very important.
Now, as I said, the basic competence of information security are most often summed up by the CIA tried.
In an ideal world, your data should always be kept confidential in its current state and available.
Of course, you often need to make choices about which information security principles to emphasize.
If you are storing sensitive medical information, for instance, you'll focus on confidentiality.
But as a financial institution might emphasize data integrity to ensure that nobody's bank account is
credited or debited incorrectly.
Let us have a look at some other definitions now, governance of information security, governance in
the system by which organizations information security activities are directed and controlled information
security, even if it is an event occurrence of a system service or a network state indicating a possible
breach of information security policy or failure of controls, or a previously unknown situation that
can be security.
Relevant information security incident.
Now, incident is a single or a series of unwanted or unexpected information security events that have
a significant probability of compromising business operations and threatening the information security
of your organization.
And as I explained earlier, not repudiation is the ability to prove the occurrence of a claimed event
or the action and its originating entities.
Well, this was it for this lecture.
The main focus of this lecture was for you to understand the definition of information security, and
I hope you understood it.
And all that points to the CIA trial, which will be exploring in the next lecture.