Knowra Information security Information security Information security is the practice and study of protecting information and information systems from unauthorized access, use, disclosure, alteration, disruption, or destruction.
Confidentiality, integrity, and availability : A framework of three security goals: restricting disclosure, preserving accuracy, and keeping systems usable. These goals summarize the protections information security is designed to provide.
Access control : Policies and mechanisms that determine which subjects may perform which actions on resources. It limits information and system operations to authorized identities and roles.
Information security management system : A documented framework of policies, processes, and controls for managing an organization's information security. It organizes security as an ongoing management program rather than isolated technical fixes.
Cybersecurity : The protection of digital systems, networks, and data from cyberattacks and unauthorized activity. Cybersecurity often emphasizes digital threats, while information security also covers non-digital information.
Data breach : An incident in which protected information is accessed or disclosed without authorization. Breaches are a direct failure of information protection and can expose sensitive records.
Threat model : An account of an asset, its possible adversaries, their capabilities, and the attacks they may attempt. Security choices depend on which adversaries and attacks are considered plausible.
Cryptography : The mathematical study and practice of securing information through transformations such as encryption and digital signatures. Cryptographic tools protect confidentiality, integrity, and authenticity across exposed channels.
ISO/IEC 27001 : An international standard specifying requirements for establishing, maintaining, and improving an information security management system. Organizations use it to structure and assess systematic security management.
Privacy : The ability of people to control access to and use of information about themselves. Privacy concerns appropriate personal-data use, not only protection against unauthorized access.
Ransomware : Malware that encrypts or blocks access to data and demands payment for restoration or non-disclosure. Ransomware threatens availability and often adds the risk of information disclosure.
Show all 28