Toward a universal set of principles for these universal business concerns
New students in an information security certification training class usually begin their study with a picture of a triangle. The diagram depicts the three principles of information security: confidentiality, integrity, and availability. All of the controls, safeguards, and security processes that follow will be designed to counter obstacles in meeting these three objectives. The lesson will illustrate that without a functioning security program the principles fall down: confidentiality will be breached, integrity of assets damaged, and reputation and market share harmed. Corporations--and, in some cases, their officers--may even be exposed to criminal liability under Sarbanes-Oxley or by other legal sanctions.
See full Article.

