Accountability, responsibility, trust Enforcement of policies. The threat of legal prosecution is a deterrent to abuse of systems and networks, but can be difficult and expensive. Encryption Multiple, archived backups and redundancy. Confidence that security measures are correctly implemented and that a system will behave as expected. The ability to know who did what, when, where.
Users are responsible and accountable for their actions.
Automatic audit trail monitoring and analysis to detect security breaches. Summary Knowledge and information are the most important assets of many companies, they need protecton. Information can take many forms, hence methods of securing information are various. Allocation of security responsibilities. Information security education.