Participants introduced themselves. Steve introduced Keith Rayle with IBM Security and Privacy Services, who facilitated the meeting. Can be applied to one slice of the business, one system, service or the entire organization. Information security management enables information to be shared while ensuring protection of that information and its associated computer assets.
Information security provides for confidentiality, integrity, availability and non-repudiation.
It has value to the organization and needs to be suitably protected. Security protects assets in order to provide an organization from a wide range of threats to ensure business continuity, minimize damage and maximize return on investment and business opportunities. Information exists in many forms, including written, stored electronically, transmitted by post or electronic means, shown on films, and spoken in conversations. Whatever form, information should always be protected to its value. A statement of the goals, responsibilities, and accepted behaviors required to maintain a secure environment.