CHAPTER 2: WHY INFORMATION SECURITY?

The specification for information security management, ISO 27001, defines information security as:

Information Security: The preservation of confidentiality, integrity and availability of information; in addition, other properties, such as authenticity, accountability, non-repudiation, and reliability can also be involved

where:

Confidentiality: the property that information is not made available or disclosed to unauthorised individuals, entities, or processes

Integrity: the property of safeguarding the accuracy and completeness of assets

Availability: the property of being accessible and usable upon demand by an authorised entity

A rapidly increasing number of organisations are pursuing certification ...

Get ISO27001 Assessments Without Tears now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.