What does information security protect information from?

Answer 1

Let's just say you have lots of vital information such as customer specifics, technological discovery that you'd want to implement into your company's operations, etc. You'd want to protect them from being read, which may lead onto them being used. You lose competitive edge over others as the information can be used by others.

There are many forms of attacks available:

hackers

trojans/malware

viruses

espionage

STAFF

There are many forms of information security software/hardware available. From monitoring of incoming/outgoing information on the internet, network gateway security to encryption strategies that stops files being used.

I find that encryption is the most useful one as no matter how much monitoring you do, you cannot stop people from stealing through USB, portable harddrive, etc. Or you'd have to be on constant vigilance when the monitoring software alarms you of the stealing actions.

Some opensource encryption softwares (i.e. free) avaiable on the internet, though I've forgotten the names. These softwares provide single user information security.

Some bigger enterprise security softwares such as EZ-Lock DRM by Digital Commerce Information provides full encryption strategies that allows different range of users, from 10 users to 30000. Its core ability is that users do not have to change any working habits but at the same time having everything encrypted and thus secured.

Others such as Adaptive Network Security from Brandford Network emphasizes on recognizing friends and foes. It integrates and correlates network resources, user information, and device information to automate security and IT operations.

Answer 2

The security of data and information is of vital importance to any organization and it is therefore a business decision as to what information should be protected and to what level. The business's approach to the protection and use of data should be contained in a security policy to which everyone in the organization should have access and the contents of which everyone should be aware. The system in place to enforce the security policy and ensure that the business's IT security objectives are met is known as the Information Security Management System (ISMS). Information Security Management supports corporate governance by ensuring that information security risks are properly managed.