Difference between revisions of "Information security management practice"
(→Purpose) |
|||
| Line 1: | Line 1: | ||
| − | [[Information security management practice]] is the practice of protecting an organization by understanding and managing risks to the confidentiality, integrity, and availability of information. | + | [[Information security management practice]] (hereinafter, the ''Practice'') is the [[practice]] that |
| + | |||
| + | . This ''Practice'' is a part of the [[ITIL practices]]. | ||
| + | |||
| + | of protecting an organization by understanding and managing risks to the confidentiality, integrity, and availability of information. | ||
Revision as of 17:56, 28 December 2020
Information security management practice (hereinafter, the Practice) is the practice that
. This Practice is a part of the ITIL practices.
of protecting an organization by understanding and managing risks to the confidentiality, integrity, and availability of information.
Definitions
According to the ITIL Foundation 4e by Axelos,
- Information security management practice. The practice of protecting an organization by understanding and managing risks to the confidentiality, integrity, and availability of information.
Purpose
The purpose of the Practice is to protect the information needed by the organization to conduct its business.
Parts
The Practice includes understanding and managing risks to:
- Confidentiality
- Integrity
- Availability
- Authentication
- Non-repudiation
