INFORMATION SECURITY

The knowledge area of ​​Information and Systems Security is attracting, on a global scale, ever-increasing interest. Information, in whatever form it exists (electronic or paper), is an important asset of the organization and plays a primary role in the achievement of its business objectives, creating the need for an adequate protection system. We often mistakenly aim to protect the information system rather than the information itself. The information must be classified to determine the priority and level of protection required. The classification should take into account its criticality to the organization, as well as its legal, regulatory and contractual requirements. Information protection is achieved by taking the appropriate technical and organizational measures in all phases of its life cycle as shown in the diagram below.