Information Security
What is Information Security?
The practice of protecting information by mitigating risks to its confidentiality, integrity, and availability. Governed by frameworks such as ISO 27001 and NIST CSF.
Related terms
Frameworks that govern information security
What the standards actually require on information security
Requirements naming information security across 6 standards, quoted from the control text.
The CISO should be accountable for controlling the budget for information security.
new-zealand-information-security-manual-nzism::3.2.15.C.01 · 3.2.15.C.01 CISO controls information security budget →Where managed security service providers deliver security services, management remains responsible for the security of the institution's systems and information and oversees the effectiveness of the services provided.
ffiec-it-examination-handbook::IS-II.C.20(b) · II.C.20(b) Managed Security Service Providers (Information Security) →The risk treatment plan must be put into effect, and documented information on the results of risk treatment must be retained.
iso-27001-2022::clause-8.3 · Information security risk treatment →In line with 5.2 the organization should express its information needs as its own questions on how information security performs and how effective the ISMS is, and express its measures in terms of those needs;
iso-iec-27004-2016::8.7 · Evaluate information security performance and ISMS effectiveness →The organization carries out the risk treatment plan and keeps documented results of the treatment.
iso-27001-2013::clause-8.3 · Information security risk treatment →The auditor examines that the risk treatment plan was implemented and that documented information of the results is retained, sampling treatment actions to verify they were completed and that the controls they introduced operate.
iso-iec-27007-2020::A:8.3 · Annex A: auditing ISO/IEC 27001:2013, 8.3 Information security risk treatment (operation) →Questions people ask about information security
What is Information Security?
Why is Information Security important for compliance?
What concepts are related to Information Security?
Which compliance frameworks address Information Security?
Where can I learn more about Information Security?
See how Information Security applies across compliance frameworks
Our platform maps 1,027 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.