Information Assurance: Managing Organizational IT Security Risks

Provide an understanding of the meaning of IA and its significance relative to the operation of private and public organizations
Provide a definition of the fundamental rights of private and public organizations as well as the role that information and IT plays relative to these rights
Provide a description of some significant examples of challenges that have emerged to threaten the fundamental rights of private and public organizations
IA is the process for protecting and defending information by ensuring its confidentiality, integrity, and availability. At its most fundamental level, IA involves protecting the rights of people and organizations. There are two perspectives to consider. First, IA can provide organizations with the ability to protect their own rights as entities to survive, coexist, and grow, since information is so integral to their management and operations. Second, IA can provide organizations with the ability to protect the rights of other parties that support and interact with them. These parties include employees, the existing and potential consumers of their products and services, suppliers, and other organizations that are allies as a result of partnerships and joint ventures. This chapter will further describe the fundamental rights of organizations and the contributions of information and IT to achieving those rights, and it will explore the emergence of threats that challenge that achievement.
As the needs...