Information Assurance

Purpose

Information assurance ensures that information risks are understood and managed.

Assurance Areas

Information assurance covers:

• confidentiality

• integrity

• availability

• data protection

• access control

• auditability

• resilience

• supplier assurance

• incident response

Assurance Activities

Projects may require:

• security requirements review

• data protection review

• threat modelling

• vulnerability scanning

• penetration testing

• supplier security review

• operational readiness review

• risk acceptance