Information security, sometimes shortened to infosec, is the practice of protecting information by mitigating information risks. It is part of information...

Computer security (also cybersecurity, digital security, or information technology (IT) security) is the protection of computer software, systems and...

Information security standards (also cyber security standards) are techniques generally outlined in published materials that attempt to protect the cyber...

Information security management (ISM) defines and manages controls that an organization needs to implement to ensure that it is sensibly protecting the...

(Certified Information Systems Security Professional) is an independent information security certification granted by the International Information System...

Compartmentalization, in information security, whether public or private, is the limiting of access to information to persons or other entities on a need-to-know...

An information security audit is an audit of the level of information security in an organization. It is an independent review and examination of system...

Security information and event management (SIEM) is a field within the field of computer security, where software products and services combine security...

provide security (security company, security police, security forces, security service, security agency, security guard, cyber security systems, security cameras...

A chief information security officer (CISO) is a senior-level executive within an organization responsible for establishing and maintaining the enterprise...

Information security awareness is an evolving part of information security that focuses on raising consciousness regarding potential risks of the rapidly...

The Information Security Department (Hebrew: המערך לביטחון מידע, HaMa'arakh LeVithon Meida, abbreviated to Mahbam) is a department in the Israel Defense...

A cryptosystem is considered to have information-theoretic security (also called unconditional security) if the system is secure against adversaries with...

The Federal Information Security Management Act of 2002 (FISMA, 44 U.S.C. § 3541, et seq.) is a United States federal law enacted in 2002 as Title III...

Sensitive security information (SSI) is a category of United States sensitive but unclassified information obtained or developed in the conduct of security activities...

Security information management (SIM) is an information security industry term for the collection of data such as log files into a central repository for...

Security controls are safeguards or countermeasures to avoid, detect, counteract, or minimize security risks to physical property, information, computer...

Cardholder Information Security Program (CISP) was a program established by Visa USA in 2001 to ensure the security of cardholder information as it is being...

Physical information security is the intersection or common ground between physical security and information security. It primarily concerns the protection...

The Security Information Service (BIS, Czech: Bezpečnostní informační služba) is the primary domestic national intelligence agency of the Czech Republic...

Committee on National Security Systems Instruction No. 4009, National Information Assurance Glossary, published by the United States federal government...

An information security operations center (ISOC or SOC) is a facility where enterprise information systems (web sites, applications, databases, data centers...

Trusted Information Security Assessment Exchange (TISAX) is an assessment and exchange mechanism for the information security of enterprises, developed...

A security clearance is a status granted to individuals allowing them access to classified information (state or organizational secrets) or to restricted...

classification of an information asset and rules on how to protect information classified at each level. This process often includes security clearances for...

Operations security (OPSEC) is a process that identifies critical information to determine whether friendly actions can be observed by enemy intelligence...

Information Technology Security Assessment (IT Security Assessment) is an explicit study to locate IT security vulnerabilities and risks. In an assessment...

complexity theory, algorithmic information theory, and information-theoretic security. Applications of fundamental topics of information theory include source...

disclosed classified information to foreign powers and private individuals have become publicly known, sometimes with distinct national security and diplomatic...

Security engineering is the process of incorporating security controls into an information system so that the controls become an integral part of the system’s...