Information security is the practice of protecting information by mitigating information risks. It is part of information risk management. It typically...

Computer security (also cybersecurity, digital security, or information technology (IT) security) is the protection of computer software, systems and...

Information security standards (also cyber security standards) are techniques generally outlined in published materials that attempt to protect a user's...

Information security management (ISM) defines and manages controls that an organization needs to implement to ensure that it is sensibly protecting the...

(Certified Information Systems Security Professional) is an independent information security certification granted by the International Information System...

An information security audit is an audit of the level of information security in an organization. It is an independent review and examination of system...

A chief information security officer (CISO) is a senior-level executive within an organization responsible for establishing and maintaining the enterprise...

Security information and event management (SIEM) is a field within computer security that combines security information management (SIM) and security...

Compartmentalization, in information security, whether public or private, is the limiting of access to information to persons or other entities on a need-to-know...

The Information Security Department (Hebrew: המערך לביטחון מידע, HaMa'arakh LeVithon Meida, abbreviated to Mahbam) is a department in the Israel Defense...

provide security (security company, security police, security forces, security service, security agency, security guard, cyber security systems, security cameras...

A cryptosystem is considered to have information-theoretic security (also called unconditional security) if the system is secure against adversaries with...

Information security awareness is an evolving part of information security that focuses on raising consciousness regarding potential risks of the rapidly...

Sensitive security information (SSI) is a category of United States sensitive but unclassified information obtained or developed in the conduct of security activities...

Security engineering is the process of incorporating security controls into an information system so that the controls become an integral part of the system's...

Security information management (SIM) is an information security industry term for the collection of data such as log files into a central repository for...

The Payment Card Industry Data Security Standard (PCI DSS) is an information security standard used to handle credit cards from major card brands. The...

The Federal Information Security Management Act of 2002 (FISMA, 44 U.S.C. § 3541, et seq.) is a United States federal law enacted in 2002 as Title III...

The Security of Information Act (French: Loi sur la protection de l’information, R.S.C. 1985, c. O-5), formerly known as the Official Secrets Act, is...

Security controls are safeguards or countermeasures to avoid, detect, counteract, or minimize security risks to physical property, information, computer...

Committee on National Security Systems Instruction No. 4009, National Information Assurance Glossary, published by the United States federal government...

complexity theory, algorithmic information theory, and information-theoretic security. Applications of fundamental topics of information theory include source...

Trusted Information Security Assessment Exchange (TISAX) is an assessment and exchange mechanism for the information security of enterprises, developed...

Physical information security is the intersection or common ground between physical security and information security. It primarily concerns the protection...

States security clearance is an official determination that an individual may access information classified by the United States Government. Security clearances...

Operations security (OPSEC) is a process that identifies critical information to determine whether friendly actions can be observed by enemy intelligence...

disclosed classified information to foreign powers and private individuals have become publicly known, sometimes with distinct national security and diplomatic...

Information Technology Security Assessment (IT Security Assessment) is an explicit study to locate IT security vulnerabilities and risks. In an assessment...

Information sensitivity is the control of access to information or knowledge that might result in loss of an advantage or level of security if disclosed...

The Security Information Service (BIS, Czech: Bezpečnostní informační služba) is the primary domestic national intelligence agency of the Czech Republic...