
xiii
Information Security
Fundamentals
Overview
e purpose of information security is to protect an organization’s valuable
resources, such as information, hardware, and software. rough the selection and
application of appropriate safeguards, security helps an organization to meet its
business objectives or mission by protecting its physical and financial resources,
reputation, legal position, employees, and other tangible and intangible assets. We
will examine the elements of computer security, employee’s roles and responsibili-
ties, and common threats. We will also examine the need for management controls,
policies and procedures, and risk ma ...