ABSTRACT

Information systems are increasingly corrected and shared among many US government (USG) entities, such as the Department of Defense, federal agencies, private-sector entities, and, in some cases, international entities. The expansion of inter-networked computer systems has evolved into a globally integrated distributed network with worldwide users. Of critical importance and necessity is the USG’s ability to adequately protect its information and information systems. Along with this is the fact that networks and systems processing get more complex every day. It is this vital need and increasing complexity that requires a new way of thinking — one that combines information systems security with traditional security disciplines, such as physical security and personnel security. To fully appreciate the definition, it is important to look at some key words. For it to be a system, the elements must have been designed with the purpose of achieving a goal. Having a specific purpose is a fundamental characteristic of a system.