Information Security for Managers

Cryptography—And How IT Works

CHAPTER 17

ORGANIZATIONS HAVE A RESPONSIBILITY TO SECURE the information they manage, whether health records, financial records, corporate records, or individually identifiable information, against unauthorized disclosure or alteration. At the same time, this information needs to be stored, transmitted, and processed in order to maintain business operations. To satisfy these security requirements, organizations institute cryptographic protocols and policies designed to ensure the confidentiality and integrity of stored and transmitted data. Cryptography is the process of transforming plaintext into ciphertext and is the primary countermeasure for “unauthorized release of message contents” as well as serves ...