ABSTRACT

Security is generally defined as the protection of an organisation’s well being. Since information is vital to the success of many organisations the security of their information and of the technology used to support it is equally vital. In protecting this information three aspects, confidentiality, integrity and availability need to be considered. Confidentiality is the protection of the information such as to prevent its disclosure to persons unauthorised to access it. Integrity is ensuring that the data is accurate to within the degree sufficient to meet the purposes of the organisation. Availability means ensuring that the technology upon which the system depends makes the information available in a time frame consistent with the business objectives.