A Multilayered Approach to Information Security
Establishing multiple layers of defense is critical to protecting valuable information assets. An effective multilayered defense involves no...
Physical, Procedural, and Technical Controls in Information Security
In this post, I will briefly discuss the three major types or categories of controls that can be used to defend information systems – namely...
Using Multiple Controls or Countermeasures for Information Security
In this post I would like to talk about using multiple controls or countermeasures for information security purposes. To begin, consider a c...
Prerequisites for Attacking an Information System
In order for an attack on an information system to succeed, an attacker must possess three specific things: (1) method , (2) opportunity , a...
Types of Information System Attackers
Who are these people who seek to compromise the confidentiality, integrity, or availability of our information assets? Surprisingly, many at...
Understanding Threats to Information Systems
To better understand the various ways in which the confidentiality, integrity, or availability of information assets can be threatened, cons...
Integrity, Availability, and Information Security
In an earlier post , I discussed confidentiality in the context of information security. In this post, I would like to elaborate on the rema...
Confidentiality and Information Security
When it comes to confidentiality, a good information security strategy is to adopt the need-to-know basis for determining who has access to ...
The Pillars of Information Security
I’d like to begin this post by discussing information security threats in the context of what has come to be known as CIA -- confidentiality...
Vulnerabilities, Threats, and Controls in Information Security
In an earlier post , I noted that one of the major goals of information security is to mitigate security risks. Another major goal of inform...
Information Assets and the Scope of Information Security
When thinking about information security, it’s important to remember that as a discipline and as a profession, information security has a va...
Computer Security and Information Technology Failure
Although many people think of the world of information privacy and security as one characterized by hackers, cyber terrorists, or government...
Information Security and Human Dependence on Computers
How dependent are you upon information and communication technologies? If you’re like most people in the developed world, your day-to-day ac...
Philosophical Thoughts on Information Security
To begin this series of posts on computer and information security, I wanted to pose an interesting philosophical question: namely, why is ...
