With the increasing interconnectivity of businesses to date,
information is now exposed to a broad number of threats. Businesses
need to ensure there is protection of information in order to
prevent loss, unauthorized access or misuse. Businesses must have
in place a process of assessing threats and risks to information
and the procedures and controls to preserve the information.
There are three guiding principles:
- Confidentiality - Access to data must
be limited to authorized parties.
- Integrity - The data must be
authentic and complete.
- Availability - The data must be
accessible, as needed, by those who are authorized to access
it.
(Foundations of Information Privacy and Data Protection; A
Survey of Global Concepts, Laws and Practices; Peter Swire, Kenesa
Ahmad).
