Information security, sometimes shortened to infosec, is the practice of protecting information by mitigating information risks. It is part of information...

Compartmentalization, in information security, whether public or private, is the limiting of access to information to persons or other entities on a need-to-know...

Computer security, cybersecurity, digital security or information technology security (IT security) is the protection of computer systems and networks...

Information security management (ISM) defines and manages controls that an organization needs to implement to ensure that it is sensibly protecting the...

(Certified Information Systems Security Professional) is an independent information security certification granted by the International Information System...

Information security standards or cyber security standards are techniques generally outlined in published materials that attempt to protect the cyber environment...

A chief information security officer (CISO) is a senior-level executive within an organization responsible for establishing and maintaining the enterprise...

An information security audit is an audit of the level of information security in an organization. It is an independent review and examination of system...

Security information and event management (SIEM) is a field within the field of computer security, where software products and services combine security...

Information security awareness is an evolving part of information security that focuses on raising consciousness regarding potential risks of the rapidly...

A cryptosystem is considered to have information-theoretic security (also called unconditional security) if the system is secure against adversaries with...

means of computer security include the physical security of systems and the security of information held on them. Corporate security refers to the resilience...

Security engineering is the process of incorporating security controls into an information system so that the controls become an integral part of the system’s...

Sensitive security information (SSI) is a category of United States sensitive but unclassified information obtained or developed in the conduct of security activities...

The Information Security Forum (ISF) is an independent information security body. The ISF delivers a range of content, activities, and tools. The ISF...

The Security Information Service (BIS, Czech: Bezpečnostní informační služba) is the primary domestic national intelligence agency of the Czech Republic...

Founded in 1990, the Information Security Group (ISG) is an academic department focusing on Information and Cyber Security within the Engineering, Physical...

The Federal Information Security Management Act of 2002 (FISMA, 44 U.S.C. § 3541, et seq.) is a United States federal law enacted in 2002 as Title III...

Security information management (SIM) is an information security industry term for the collection of data such as log files into a central repository for...

A security clearance is a status granted to individuals allowing them access to classified information (state or organizational secrets) or to restricted...

Cardholder Information Security Program (CISP) was a program established by Visa USA in 2001 to ensure the security of cardholder information as it is being...

Physical information security is the intersection, the common ground between physical security and information security. It primarily concerns the protection...

Committee on National Security Systems Instruction No. 4009, National Information Assurance Glossary, published by the United States federal government...

Trusted Information Security Assessment Exchange (TISAX) is an assessment and exchange mechanism for the information security of enterprises, developed...

classification of an information asset and rules on how to protect information classified at each level. This process often includes security clearances for...

Information Technology Security Assessment (IT Security Assessment) is an explicit study to locate IT security vulnerabilities and risks. In an assessment...

The Security of Information Act (French: Loi sur la protection de l’information, R.S.C. 1985, c. O-5), formerly known as the Official Secrets Act, is...

Security controls are safeguards or countermeasures to avoid, detect, counteract, or minimize security risks to physical property, information, computer...

algorithmic information theory, and information-theoretic security. There is another opinion regarding the universal definition of information. It lies in...

Information sensitivity is the control of access to information or knowledge that might result in loss of an advantage or level of security if disclosed...