View full version

What I've learned about Information Security

Learning the fundamentals of cyber crime and digital forensics. Studying ways to protect information systems learning about programs used to monitor and track illicit activity online. Studying math, programming and information technology. Information security is important because it protects the organization's ability to function. It enables the safe operation of applications implemented on the organizations Information Technology systems it protects the data the organization collects and uses.

Learned that Information Security is an essential skills and competences that allow individuals to engage with Information and other information providers effectively, as well as develop a life long learning skills to socialize and become active citizens and also the information security about. Information security is the process and methodologies which are designed and implemented to protect print, electronic, and etc.

What is Information Security Assurance?
Information Security Assurance is assuring that the confidentiality, safety of whatever data or information gathered is observed and any of those should be secured and kept away from phishing or any fraudulent act.

Components of Information Security Assurance?
Components of Information Security Assurance all of which observes criteria or requirement leveled as High, Medium, and Low.

-Integrity
-Availability
-Authentication
-Confidentiality
-Nonrepudiation

Differentiate the certification programs to Common body language?

The certification program focuses on the skills being thought and provides certificates based on an individual's performance related to the skills he studied for; while Common body language is observing or focuses on the different types of nonverbal communication that our bodies show such as gestures, body movements, posture, and facial expressions.

Differentiate the Governance and Risk management?

Governance focuses on having control over decision making, it is a system where its constituents are bound to oblige to the rules implemented by the government or governing personnel while Risk Management is a program that identifies or evaluates threats, risks, and taking initial steps to address or resolve any potential risk or threat.

Difference between Security Architecture to Design?

Security Architecture is composed of security designs that evaluate potential risks in a certain scenario while security design is how Security architecture is formatted or designed.

Difference between Business Continuity Planning to D-i-s-a-s-t-e-r Recovery Planning?

Business Continuity Planning focuses on bringing up ideas and strategies to help a business operate while experiencing both short-term and long-term challenges. Disaster Recovery Planning focuses on strategies on how an organization can cope up after any unfortunate events.

What is Physical Security Control?

Physical Security Control focuses on preventing any unauthorized access to data or information, therefore security measures are observed.

What is Operations Security?

Operations Security is procedural security, one of the risk management programs or processes ensuring the safety of sensitive information.

What is Law?

Rules or regulations are implemented or enforced by government institutions.

What is an Investigation?

The act of investigating or gathering information or facts about a certain incident.

What is Ethics?

Ethics focuses on what is right or wrong base on moral principles.

What is Information Security? Nonrepudiation.

Based on Wikipedia "Information Security, sometimes shortened to InfoSec, is the practice of protecting information by mitigating information risks. It is part of information risk management."

According to google " Non-repudiation is the assurance that someone cannot deny the validity of something. Non-repudiation is a legal concept that is widely used in information security and refers to a service, which provides proof of the origin of data and the integrity of the data."