It is this phase that creates a level of understanding of the issues and the organization's ability to address them. Protection is the proactive process of creating an environment that is as secure as possible. This phase examines the ten fundamental aspects of information security and the issues involved. Detection is the reactive process of determining inappropriate activities and alerting responsible individuals. Detection is required for those things that cannot be protected or predicted.
Reaction is process of responding to a security incident.
This phase focuses on resolving a security incident to minimize the impact. Reflection is the follow-up processes necessary to evaluate the quality of the security implementation. These post-incident procedures are necessary for the organization to learn from the incident and share that experience. As well, this book will explore the fundamental aspects of information security, which are the basic building blocks required to create a complete information security environment. Awareness is assuring that everyone understands the importance of security.