Whois & Analysis for isaca.org

ISACA is an international professional association focused on IT Governance.

Previously known as the Information Systems Audit and Control Association, ISACA now goes by its acronym only.

Information security, sometimes shortened to InfoSec, is the practice of preventing unauthorized access, use, disclosure, disruption, modification, inspection, recording or destruction of information.

It is a general term that can be used regardless of the form the data may take (e.g. electronic, physical).

Risk management is the identification, assessment, and prioritization of risks (defined in ISO 31000 as the effect of uncertainty on objectives) followed by coordinated and economical application of resources to minimize, monitor, and control the probability and/or impact of unfortunate events or to maximize the realization of opportunities.

Risk management’s objective is to assure uncertainty does not deflect the endeavor from the business goals.

Information assurance (IA) is the practice of assuring information and managing risks related to the use, processing, storage, and transmission of information or data and the systems and processes used for those purposes.

Information assurance includes protection of the integrity, availability, authenticity, non-repudiation and confidentiality of user data.

It uses physical, technical and administrative controls to accomplish these tasks.

While focused predominantly on information in digital form, the full range of IA encompasses not only digital but also analog or physical form.

These protections apply to data in transit, both physical and electronic forms as well as data at rest in various types of physical and electronic storage facilities.

Information technology (IT) is the application of computers to store, study, retrieve, transmit, and manipulate data, or information, often in the context of a business or other enterprise.

IT is considered a subset of information and communications technology (ICT).

In 2012, Zuppo proposed an ICT hierarchy where each hierarchy level "contain[s] some degree of commonality in that they are related to technologies that facilitate the transfer of information and various types of electronically mediated communications.".