It is a study of how to protect your information assets from destruction, degredation, manipulation and exploitation. But also, how to recover should any of those happen.

Timely reliable access to data and information services for authorized users.

Protection against unauthorized modification or destruction of information.

Assurance that information is not disclosed to unauthorized persons.

A security measures to establish the validity of transmission, message or originator.

Assurance that the sender is provided with proof of a data delivery and recipient is provided with proof of the sender's identity, so that neither can later deny having processed the data.

Refers to the protection of hardware, software and data against physical threat's to reduce or prevent disruptions, to operations and loss of assets.

It is a variety of ongoing measures taken to reduce the likelihood and severity of accidental and intentional alternation, destruction, misappropriation, misuse, misconfiguration, unauthorized distribution and unavailability of an organization's logical and physical assets as the result of action or in action by insiders and known outsiders, such as business partners.

It is the inherent technical features and functions that collectively contribute to an IT infrastructure achieving and sustaining confidentiality, integrity, availability, accountability, authenticity and reliability.

Involves the implementation of standards operation security procedures that define the nature and frequency of the interaction between user's systems and systems resources.