This snapshot, taken on 04/03/2010, shows web content selected for preservation by The National Archives. External links, forms and search boxes may not work in archived websites.

We're creating a single website for everything to do with BIS but, while we do that, you'll find information in three places. > Find what you're looking for

 

Information Security

What it is, why we need Information Security, the risks associated with security breaches and how we can protect our information.

What is Information Security?

Information security is the practice of ensuring information is only read, heard, changed, broadcast and otherwise used by people who have the right to do so.  It requires a range of skills and knowledge and increases in importance as our use of and reliance upon information grows.

Why do we need Information Security?

All information has value.  Sometimes this might be trivial but in many cases value is critical.

Value is measured in different ways, depending on the nature of information. In some cases, there may be a straightforward monetary value associated with given information.  For others, emphasis is placed on different aspects of value such as the effects of unauthorised disclosure and loss of confidentiality.

What risks are associated with Information Security breaches?

The range of risks associated with breaches of information security is long. It includes:

  • Fraud
  • Illegal personal investigation
  • Industrial espionage
  • Terrorism

How can Information Security be protected?

Information security can be a daunting prospect for the average user. It is often seen as a highly technical discipline that requires expensive equipment and specialist assistance.

While there are many situations that do need this type of approach, the most sensible and effective first steps are based on common sense and sound management practice.

Assessing and understanding the risks for your own organisation will help to establish appropriate risk management.  In turn, this will ensure appropriate incident management and recovery when security is compromised.  In addition, organisations should have:

  • A pragmatic approach to legislation and standards, including an information security policy, supported by realistic and workable processes and procedures.
  • A well-informed, well-trained workforce.
  • Appropriate (but not excessive) levels of vigilance.


Return to Information Security Business Advice Home Page