If you’ve had any involvement at all with security you’ll have come across people using cyber security and information security, and others arguing that they’re completely distinct. In typical style, I’d weigh in with the fact that they are both wrong.
Security itself is very much a discipline, a set of skills and approaches which are designed and learned to identify threats and mitigate their impact on assets. Ultimately, regardless of the type of security we’re talking about, the threats are always going to be people, and the assets will be more people. There may be some intervening tools and technology in the way, but security is about people. If we were worried about environmental threats, we’d be calling it safety instead.
A few hundred years later, we have chapter 12 of the Book of Judges which tells us of the first use of a password to identify people, in a story which still gives us the term shibboleth today. The standard lens through which people look at information security is the CIA triad - and while it definitely has its flaws it is widely recognised and well established so I’ll stick with it. CIA in this case standards for three attributes which information security is designed to protect:Integrity:information should be available when required
The problem is that we need something more than the CIA triad as a lens to look at this world. Confidentiality, integrity, and availability are a little more distant than we need if we’re talking at the technology level. When we get into technology we have to deal with more detailed, more concrete, ideas than when we’re dealing with the information domain.Parkerian hexad
Coffee_Fueled Great article and a very interesting distinction to make!