Information Assurance Handbook: Effective Computer Security and Risk Management Strategies

CHAPTER 3

Information Assurance Principles

Once you understand the importance of information assurance, you need to embrace some fundamental expectations prior to and during the implementation of security, independent of the size or nature of the business. A common model and understanding of information assurance is necessary if an organization is to speak a common risk language and understand common objectives. The information assurance model used throughout this work is the Maconachy-Schou-Ragsdale (MSR) model.

The MSR Model of Information Assurance

In 2001, the Maconachy-Schou-Ragsdale model described three states of information (storage, transmission, and processing); three essential countermeasures (technology, policy, and people); and ...