Information Assurance

1. Front Matter

   Pages i-xv

   PDF

2. An Introduction to Information Assurance

   1. Front Matter

      Pages 1-1

      PDF

   2. What is Information Assurance?

      Pages 3-15

   3. The World of Information

      Pages 16-27

   4. The Theory of Risks

      Pages 28-50

   5. The Information World of Crime

      Pages 51-68

   6. IA Trust and Supply Chains

      Pages 69-82

   7. Basic IA Concepts and Models

      Pages 83-102

   8. The Role of Policy in Information Assurance

      Pages 103-107

3. IA in the World of Corporations

   1. Front Matter

      Pages 109-109

      PDF

   2. The Corporate Security Officer

      Pages 111-121

   3. Corporate Security Functions

      Pages 122-135

   4. IA in the Interest of National Security

      Pages 136-152

   5. The Corporate IA Officer

      Pages 153-161

   6. IA Organisational Functions

      Pages 162-181

   7. Incident Management and Response

      Pages 182-187

4. Technical Aspects of IA

   1. Front Matter

      Pages 189-189

      PDF

   2. IA and Software

      Pages 191-212

   3. Applying Cryptography to IA

      Pages 213-221

   4. IA Technology Security

      Pages 222-234

When you first hear the term information assurance you tend to conjure up an image of a balanced set of reasonable measures that have been taken to protect the information after an assessment has been made of risks that are posed to it. In truth, this is the Holy Grail that all organisations that value their information should strive to achieve, but which few even understand. Information assurance is a term that has recently come into common use. When talking with old timers in IT (or at least those that are over 35-year old), you will hear them talking about information security, a term that has survived since the birth of the computer. In the recent past, the term information warfare was coined to describe the measures that need to be taken to defend and attack information. This term, however, has military connotations – after all, warfare is normally their domain. Shortly after the term came into regular use, it was applied to a variety of situations encapsulated by Winn Schwartau as the f- lowing three classes of information warfare: Class 1: Personal information warfare Class 2: Corporate information warfare Class 3: Global information warfare Political sensitivities lead to “warfare” being replaced by the “operations”, a much more “politically correct” word. Unfortunately, “operations” also has an offensive connotation and is still the terminology of the military and gove- ments.

• Bridge
• Bridging
• Electronic Commerce
• IT
• Information
• computer crime
• cryptography
• data security
• information assurance
• information security
• information systems
• information systems management
• information technology
• organization
• security

• School of Computing, University of Glamorgan, UK

  Andrew Blyth

• Whidbey Island, USA

  Gerald L. Kovacich

Policies and ethics