Discuss the view that information security is unlike any other aspect of information technology. The primary mission is to ensure things stay the way they are. Point out that if there were no threats to information and systems, we could focus on improving systems that support the information.
Explain that organizations must understand the environment in which information systems operate so that their information security programs can address actual and potential problems.
Emphasize to students the four important functions for an organization with respect to information security:
Protecting the organization’s ability to function
Protecting the data and information the organization collects and uses
Enabling the safe operation of applications running on the organization’s IT systems Safeguarding the organization’s technology assets