Information security foundations

🌐 Information Security Foundations

🔐 What is Information Security?

Information Security (InfoSec) refers to the practices, policies, and technologies used to protect data and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction.

🧱 Foundations of Information Security

The foundations are the core principles and concepts that define how information should be protected. These are usually grouped into the CIA Triad, along with additional principles and security controls.

1. CIA Triad

This is the backbone of information security:

• C – Confidentiality
  Ensuring that information is accessible only to those authorized to have access.
  Example: Using passwords or encryption to protect files.

• I – Integrity
  Ensuring the information is accurate and unaltered.
  Example: Hashing to detect if a file has been tampered with.

• A – Availability
  Ensuring that information and systems are available when needed.
  Example: Backups or redundancy to prevent downtime.

2. Authentication, Authorization, and Accounting (AAA)

• Authentication – Verifying the identity of a user or system.
• Authorization – Granting permission to access resources.
• Accounting (or Auditing) – Tracking user activity and access for accountability.

3. Security Policies and Procedures

These are the rules that guide how security is implemented and maintained in an organization.
Example: Password policies, access control policies, incident response plans.

4. Risk Management

Understanding and managing risks related to information assets:

• Risk Assessment – Identifying potential threats and vulnerabilities.
• Mitigation – Taking steps to reduce risk (e.g., installing firewalls, training employees).

5. Security Controls

These are measures taken to reduce risk:

• Physical controls (e.g., locks, security guards)
• Technical controls (e.g., firewalls, antivirus)
• Administrative controls (e.g., training, policies)

6. Compliance and Legal Issues

Organizations must follow laws, regulations, and standards related to data security (e.g., GDPR, HIPAA, ISO 27001).

Summary