Information systems security, more commonly referred to as INFOSEC, refers to the processes and methodologies involved with keeping information confidential, available, and assuring its integrity. It also refers to:
· Access controls, which prevent unauthorized personnel from entering or accessing a system.
· Protecting information no matter where that information is, i.e. in transit (such as in an email) or in a storage area.
· The detection and remediation of security breaches, as well as documenting those events.
Information systems security does not just deal with computer information, but also protecting data and information in all of its forms, such as telephone conversations. Risk assessments must be performed to determine what information poses the biggest risk
User questions & answers