ABSTRACT

Security and continuity planning are fundamental controls needed to prevent, detect, and respond to threats. Th e purpose of information security is to ensure business continuity and minimize business damage by preventing and reducing the impact of incidents. Th rough the selection and application of homogeneous and appropriate controls, security is a chance to meet the objectives of the organization. Each organization will have unique threats and responses depending on the organization’s objectives and tolerance for risk.