Bruce Schneier
Security
It takes each one of us doing our part to keep information secure. The goal is to maintain data confidentiality, integrity, and availability. Confidentiality is keeping information private; allowing access only to those who should have access. Integrity is not allowing any changes to the information except by those authorized to make changes. Availability is to make the information available to those who need it when they need it.
Policy
Here is where expectations are spelled out. Policy not only defines the rules, but can also serve as a means of educating and training.
Planning
Initiatives turn into strategic plans. Strategic plans are used to develop tactical plans and budgets are based on them. Stewarship Review is where plans and budget requests meet.
User Awareness
It takes everyone working together to achieve security. There are simple things one can do to greatly improve their security profile.
