97 Things Every Information Security Professional Should Know

Chapter 97. Maintaining Compliance and Information Security with Blue Team Assistance

Yasmin Schlegel

The terms “information security” and “compliance” go hand in hand when it comes to safeguarding information systems and protecting information. One of the first things that a person in information security and/or cybersecurity should be aware of is the importance of compliance and information security policies on information security and security posture in an organization.

The definition of information security is the process or practices that are created and implemented to protect all information systems platforms, no matter the form or classification level, from unauthorized access, disruption, modification, disclosure, deletion, or destruction. One area of compliance can be establishing a compliance program that institutes risk-based controls that protect the CIA (confidentiality, integrity, and availability) of all data stored, processed, and transferred. Information security policies in an organization are the high-level policies established for protecting people and company assets.

Part of defending against attacks on company assets, systems, and people comes with testing the environment. The blue team functions as an internal security team in an organization that protects against both red team offensive activities and real outside cyberattackers. Blue team’s primary goal ...