Information Security Can Be An Absolute

The primary threats to security during the early years of computers were physical theft of equipment, espionage against the products of the systems, and sabotage.

Network security focuses on the protection of the details of a particular operation or series of activities.

The value of information comes from the characteristics it possesses.

When a computer is the subject of an attack, it is the entity being attacked.

An e-mail virus involves sending an e-mail message with a modified field.

The possession of information is the quality or state of having value for some purpose or end.

A breach of possession always results in a breach of confidentiality.

Hardware is often the most valuable asset possessed by an organization and it is the main target of intentional attacks.

Information security can be an absolute

To achieve balance — that is, to operate an information system that satisfies the user and the security professional — the security level must allow reasonable access, yet protect against threats.

The bottom-up approach to information security has a higher probability of success then the top-down approach.

Using a methodology increases the probability of success.

The Implementation phase is the longest and most expensive phase of the systems development life cycle (SDLC).

The investigation phase of the SecSDLC begins with a directive from upper management.

The physical design is the blue print for the desired solution.

Recently, many states have implemented legislation making certain computer-related activities illegal.

Applications systems developed within the framework of traditional SDLC are designed to anticipate a software attack that requires some degree of application reconstruction.

A champion is a project manager, who may be a departmental line manager or staff unit manager, and understands project management, personnel management, and information security technical requirements.

A data custodian works directly with data owners and is responsible for the storage, maintenance, and protection of the information.

The roles of information security professionals are aligned with the goals and mission of the information security community of interest.