Warning: philosophical content ahead! :-) Here is a question:
what security do you do? The common answers that I've heard are:
- "Computer security"
- "System security"
- "Network security"
- "IT security"
- "Data security"
- "Information security"
In addition, "information assurance", "IT risk management" (which is likely to be a bit different though) and other less common responses are there. So, why ponder this
obtuse subject? I think in this case what you think you do affects how you approach security. For example, if you do "network security" you likely tend to think in terms of packets, flows, IDS signature strings, etc. If you are into "system security" you "harden", "securely configure", "patch", etc.
Where am I getting at? Is there the best choice? Yes, it is "
information security"! Information encompasses data, resides on systems, flows through the network, etc. My advice is to do "information security" since it allows for a broader view (but without sacrificing depth) and to make you more future-proof, as far as our profession is concerned...
1 comment:
Agreed -- I usually say "computer security" when a non-IT person asks, but I generally think of it as "securing the information by any and all means possible." Which gets me in trouble sometimes, but there you go ... :-)
Post a Comment