Information Security Fundamentals, 2nd Edition

xi

Introduction

e purpose of information security is to protect an organization’s valuable

resources, such as information, computer hardware, and software. rough the

selection and application of appropriate safeguards, security helps an organization’s

mission by protecting its physical and financial resources, reputation, legal position,

employees, and other tangible and intangible assets. To many, security is sometimes

viewed as thwarting the business objectives of an organization by imposing poorly

selected, bothersome rules and procedures on users, managers, and systems. Well-

chosen security rules and procedures do not exist for their own ...