Information Systems Security Guides & Resources
Plain-English guides to protecting information and the systems that hold it: how cyber espionage works, how breaches are detected, and what a career in security looks like. Written for IT staff, managers and students.
What information systems security is
Information systems security (ISS) is the practice of protecting an organization’s information, and the systems that store, process and move it, from unauthorized access, misuse, damage and loss. A common way to frame the goals is the three-part idea of confidentiality, integrity and availability: only the right people can see the data, the data stays accurate, and the systems work when people need them.
The terms “information security,” “information systems security” and “cybersecurity” overlap, and usage varies by organization and country. On this site we use ISS for the broad discipline, including people, process and technology, and we keep our guides to threats and detection together with our cybersecurity guides.
Where to start.
- Read about a patient, well-resourced kind of threat in cyber espionage, including a documented real case and a defense plan.
- Learn how organizations notice an intrusion in breach detection.
- If you are thinking about a career, see the growing need for cybersecurity professionals, then compare information security certificates.