CHAPTER 1

Security and Information Assurance

People are concerned about data and information security threats. Both internal and external data breaches are a concern.1 What is security? What is information assurance? How are they the same and how are they different? And perhaps, most importantly, why does it matter whether we call it information assurance or security? The last question is the easiest to answer, put simply, it does not matter much. Information assurance is an overarching construct that includes information security, network security, data security, and a few other “securities” thrown in. In other words, information assurance is the enterprise view of security, highlighting the fact that the reason for all security measures a firm ...

Get Information Technology Security Fundamentals now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.