3. IT security is only a means to information security
3.1 Impacts feared by the company
The information system is the main tool of any company; it is the vector of the business and enables activities to produce with performance and conformity.
An IT risk affects the availability, confidentiality or integrity of an IT service, which in turn has an impact on the business. This will most often result in a financial, image, compliance or even quality deficit, which needs to be specified for each type of IT risk.
The risk analysis must establish this cause-and-effect relationship and scale it down to the feared impact. It is essential to conduct this analysis as an identification of the safety process.
This phase establishes the link between the threat, system vulnerabilities,...
Exclusive to subscribers. 97% yet to be discovered!
You do not have access to this resource.
Click here to request your free trial access!
Already subscribed? Log in!
The Ultimate Scientific and Technical Reference
This article is included in
Control and systems engineering
This offer includes:
Knowledge Base
Updated and enriched with articles validated by our scientific committees
Services
A set of exclusive tools to complement the resources
Practical Path
Operational and didactic, to guarantee the acquisition of transversal skills
Doc & Quiz
Interactive articles with quizzes, for constructive reading
IT security is only a means to information security
Bibliography
Also in our database
Software tools
EBIOS – Risk analysis software
EBIOS 2010 – Expressing needs and identifying security objectives
CLUSIF...
Websites
CLUSIF – French Information Security Club
Computer security primer
http://abcdelasecurite.free.fr/
Useful links for computer security. CERT-RENATER archives, etc. CERT-A archives. False web...
Events
Assises de la Sécurité et des Systèmes d'Information > Home. October 5, 6, 7 and 8, 2011. A unity of players. All the decision-makers in the world of security.
Standards and norms
ISO 27001 Security
Informational site dedicated to the ISO/IEC 27000-series (ISO27k) standards for information security management systems.
Regulations
Legifrance – Public access to the law
Guide to Legistics. Evolution of the volume of texts. Codification. French law. Laws and regulations. Impact studies. Application of laws.
http://www.legifrance.gouv.fr/
Law no. 78-17 of January 6, 1978 – Text details
January 6, 1978,...
Statistical and economic data
Source 2011: IT Security Figures
http://www.co-c.net/chiffres-securite-france.php
A few statistics:
160 items of computer equipment disappear every day in France ;
more than 80% of e-mail traffic worldwide...
Exclusive to subscribers. 97% yet to be discovered!
You do not have access to this resource.
Click here to request your free trial access!
Already subscribed? Log in!
The Ultimate Scientific and Technical Reference