Definition
Information Security is the field concerned with protecting information from unauthorised disclosure, alteration, destruction or loss of availability, regardless of how the information is stored or processed.
Human Explanation
Information may take the form of a paper document, a computer file, a conversation or an employee's knowledge. Every form requires appropriate protection.
Why it Matters
Information is one of an organisation's most valuable assets. Its loss or disclosure may result in financial, legal and reputational harm.
Conceptual Boundary
Information Security is not limited to computer systems. It also covers paper documents, conversations, storage media and human knowledge.
Practical Perspective
The best-protected server cannot protect information left on a desk or disclosed to the wrong person.