Goals and Practices in Maintaining Information Systems Security

Main Goals Of Information Systems Security

There are various definitions of computer security; each views computer security from a different standpoint. Security professionals tend to define three interdependent information security goals: confidentially, integrity, and availability (CIA) (Solomon & Chapple, 2005).

Confidentially is the main goal of information security and refers to preventing confidential information from falling into the hands of unauthorized users. Access controls and encryption processes can prevent this.

Integrity refers to preventing unauthorized alteration and modification of data, either by unauthorized users such as hackers, or by authorized users making unauthorized modifications. Access controls prevent such modification of data by unauthorized users. In addition, to ensure integrity, a backup policy should be defined to protect against corruption or loss of data.