Security: Security and Information Essay

Submitted By patoncloud9
Words: 1032
Pages: 5
Open Document
Key Terms
Access - a subject or object’s ability to use, manipulate, modify, or affect another subject or object.
Asset - the organizational resource that is being protected.
Attack - an act that is an intentional or unintentional attempt to cause damage or compromise to the information and/or the systems that support it.
Control, Safeguard, or Countermeasure - security mechanisms, policies, or procedures that can successfully counter attacks, reduce risk, resolve vulnerabilities, and otherwise improve the security within an organization.
Exploit - to take advantage of weaknesses or vulnerability in a system.
Exposure - a single instance of being open to damage.
Hack - Good: to use computers or systems for enjoyment; Bad: to illegally gain access to a computer or system.
Object - a passive entity in the information system that receives or contains information.
Risk - the probability that something can happen.
Security Blueprint - the plan for the implementation of new security measures in the organization.
Security Model - a collection of specific security rules that represents the implementation of a security policy.
Security Posture or Security Profile - a general label for the combination of all policies, procedures, technologies, and programs that make up the total security effort currently in place.
Subject - an active entity that interacts with an information system and causes information to move through the system for a specific end purpose
Threats - a category of objects, persons, or other entities that represents a potential danger to an asset.
Threat Agent - a specific instance or component of a more general threat.
Vulnerability - weaknesses or faults in a system or protection mechanism that expose information to attack or damage.

Critical Characteristics of Information
The value of information comes from the characteristics it possesses.
Availability – Enables users who need to access information to do so without interference or obstruction and in the required format. The information is said to be available to an authorized user when and where needed and in the correct format.
Accuracy – Free from mistake or error and having the value that the end user expects. If information contains a value different from the user’s expectations due to the intentional or unintentional modification of its content, it is no longer accurate.
Authenticity –The quality or state of being genuine or original, rather than a reproduction or fabrication. Information is authentic when it is the information that was originally created, placed, stored, or transferred.
Confidentiality – The quality or state of preventing disclosure or exposure to unauthorized individuals or systems.
Integrity – The quality or state of being whole, complete, and uncorrupted. The integrity of information is threatened when the information is exposed to corruption, damage, destruction, or other disruption of its authentic state.
Utility – The quality or state of having value for some purpose or end. Information has value when it serves a particular purpose. This means that if information is available, but not in a format meaningful to the end user, it is not useful.
Possession – The quality or state of having ownership or control of some object or item. Information is said to be in possession if one obtains it, independent of format or other characteristic. While a breach of confidentiality always results in a breach of possession, a breach of possession does not always result in a breach of confidentiality.

The Systems Development Life Cycle
Information security must be managed in a manner similar to any other major system implemented in the organization.
The best approach for implementing an information security system in an organization with little or no formal security in place is to use a variation of the Systems Development Life Cycle (SDLC): the Security Systems Development Life
Show More

Related Documents: Security: Security and Information Essay

Information Security Analysis

Information systems security is an integral part of many companies including sensitive fields such as medical offices. Because of this, security officers are essential to ensure that the physical and logical aspects of information security are performed efficiently. An information security officer will have various duties such as managing information security functions in accordance to a companies policies and guidelines, providing reports to management in intervals, establishing and ensuring implementation…

Words 1758 - Pages 8

Information Security Threats

David Ofori CMGT 400 May 31, 2015 Information Security Threats Introduction Chase bank is a world renowned banking organization that has been in business for decades. It is under the conglomerate of JPMorgan Chase & Co. which is a leading global financial services firm with assets of $2.6 trillion and operations all across the world. Through various financial services, which included personal banking, small business lending, mortgages, credit cards, auto financing and…

Words 2133 - Pages 9

Information Security Essay

Information Security By: Ronald Maddox Topics Discussed Security of private information Identity theft How these security breaches affect us as internet users Ways to help protect yourself from loss of personal information and internet fraud. Information Security  Information Security which is also know as InfoSec, is the practice of defending information from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction.  Most of the information…

Words 669 - Pages 3

Information security Essay

Opinion is divided. Almost three-quaters of the population would like to see some form of regulation but most people are unsure how it can be done. Whichever way the dust settles on this issue, the tension between free and regulated flow of online information will continue to spark heated debates amongst academics, policymakers, entrepreneurs and activists across the globe. Early in the new year, the Commission is to arrange a seminar to discuss the issue of Internet content regulation, as its contribution…

Words 2361 - Pages 10

Security Information Essay

down without losing any information that could harm us if in another person’s hands. We need to keep our most valuable assets safe and one way to do this is to tighten our systems security by limiting certain access to these assets via computer systems. Our most valuable assets are as followed; our vendors systems, warehouse(s), distribution methods, computer technologies, and newest projects. All of these can be found in our operating system and without the proper securities they all can become compromised…

Words 1462 - Pages 6

Information Security Essay

Network Security Past Present and Future ISSC340: Local Area Network Technologies Smith American Military University Introduction to Network Security Since the development of computer networks there have been weaknesses and those seeking to exploit them. Initially the reasons make have been non malicious and academic in nature, but later became ways to steal valuable data in cyberspace. Those who break into networks aka hackers have many different reasons for…

Words 4180 - Pages 17

Information Security Essay

system is open to damage. Vulnerabilities can in turn be the cause of exposure. 3. How is infrastructure protection (assuring the security of utility services) related to information security? Information security is the protection of information and it is critical elements, including the…

Words 864 - Pages 4

Information Security Essay

Committee: GA Topic: Development in the field of information and telecommunication in the context of information security Dear delegates, After reading your position papers, we made a summary as follows. Please read it and may it help you. Country Name Argentina Basic Position Argentina is focusing on cracking down the ill-using of ICTs. Past Actions Reached a ‘Tunisia commitment’ with many countries to make the commitment in advancing the development of information technology and accelerate the national exchange…

Words 4000 - Pages 16

For The Security And Confidential Information Of Payroll Information

Project 1 For the security and confidential information of payroll information for our company the following procedures will be put in place: All payroll documents will be locked away in a secure filing cabinet or system in a secure location in the payroll area, the payroll software and systems will have password access with only authorised staff being aware of the passwords which will be changed at the end of each month, all computer screens have been moved so that they are not visible so that…

Words 547 - Pages 3

Audit: Information Security Essay

and Intelligent Agent Technology A Security Framework for Audit and Manage Information System Security Teresa Susana Mendes Pereira Informatics Department Superior School of Business Studies Polytechnic Institute of Viana do Castelo Valenca, Portugal ¸ Email: tpereira@esce.ipvc.pt Henrique Santos Information System Department School of Engineering University of Minho Guimaraes, Portugal ˜ Email: hsantos@dsi.uminho.pt established security standard ISO/IEC_JTCI11 [4]. The paper…

Words 2930 - Pages 12