IT Information Security. (InfoSec)

IT Information Security. (InfoSec)

who need to know about information security? why it is important nowadays? what will happen if people not aware about information security?

Situation:
Today, people can order from any online stores and pay them online from credit cards even better, make it. They can pay their  bills from home and book airlines tickets from mobile......All that just in a click.

Obviously we love all this convenience and want to keep doing this, even we want the service providers to provide more such services. If we lose money from our bank account while doing a recharge, will we again try that? No. we are doing this conveniently because we know it is safe, our bank and vendors are convinced that it is secure and even if something bad happens, we know "some" people will make sure it won't happen again. "Some" people are working to keep system safe and improving it every day.This assurance is there due to these people and it is necessary.

These "some" people are the information security guys.
 

What is Information Security?

Information is an asset to all individuals and businesses. Information Security refers to the protection of these assets in order to achieve C - I - A as the following diagram:

Confidentiality  - protecting information from being disclosed to unauthorised parties.
Integrity            - protecting information from being changed by unauthorised parties.
Availability       - to the availability of information to authorised parties only when requested.
  (credit to : https://www.infosec.gov.hk)

Why InfoSec is important?

• to protect from internal dangers
• to secure from external risks

 Impact don't have an infoSec?

• lost money
• lost trusty