Information Assurance (IA) involves measures to protect and defend information and information systems.
Five Key Principles:
- Availability: Ensuring authorised users can access information when needed
- Integrity: Protecting data from unauthorised modifications
- Authentication: Verifying the identity of users accessing systems
- Confidentiality: Restricting access to authorised users only
- Non-repudiation: Preventing users from denying their actions
IA Aims To:
- Manage information-related risks
- Protect both digital and physical data
- Ensure systems perform as needed
- Restore systems after incidents
Key Aspects of IA:
- Security audits
- Compliance checks
- Policy creation and enforcement
- Risk management strategies
IA is broader than cybersecurity, focusing on overall information protection rather than just digital defences.