Information security is, as called - about information, while IT is about technology. If you take a look at ISO 27001 - Requirements for information security management, you will see that all security measures should be deployed in order to secure information. Some of them are technical, but some are not.
However, in todays world most information is stored in IT systems and therefore most of the measures are technical.
You can consider IT security as all security measures aimed to ensure confidentiality, integrity and availbility of information in IT systems, while information secuirty is also about securing information outside IT systems (paper, brain...).
Last Wiki Answer Submitted: June 6, 2011 12:11 pm by Ramkumarr15 pts.
If you live outside the United States, by submitting your email address you consent to having your personal data transferred to and processed in the United States.
But as per my thinking IT security means security of the technology for information gathering or transfering. IT security is a part of Information Security.
information security is more general than IT security. Information Security includes all aspects of security like clear desk policy or keeping confidentiality of information. While IT security is securing the information within the IT infrastructure.
this is my understanding of the difference between the two
Thanks Ram,
But as per my thinking IT security means security of the technology for information gathering or transfering. IT security is a part of Information Security.
Is this correct?
Your comments
Cheers. Rahul
information security is more general than IT security. Information Security includes all aspects of security like clear desk policy or keeping confidentiality of information. While IT security is securing the information within the IT infrastructure.
this is my understanding of the difference between the two
We could all pick at knits over this all year…the fact is they’re by and large the same. I’d be curious to know why you’re curious?