Posts Tagged ‘risk assessment’

Guest Blog courtesy of Sam Raincock

Sunday, June 6th, 2010

Samantha Raincock Digital Forensic Consultant and Expert Witness

INFORMATION SECURITY MANAGEMENT

& SOCIAL MEDIA POLICIES

Sam Raincock, BSc, MSc, CCE, MBCS, CEng MIET

Sam Raincock Consultancy

Sam Raincock is an IT security consultant specialising in providing expert witness services in IT and telecommunications as well as information security management implementation, assessments and auditing.

Sam has produced over 250 expert reports/statements in IT and telecommunications cases for courts in the UK and Ireland principally in serious crimes. She is instructed in the investigation of complex computer cases particularly involving elaborate defences and network/security issues. In the forensic telecommunications field, she provides opinions in cases involving the evaluation of information on mobile devices, connection patterns and cell site analysis.

So what is information security? Can anything be 100% secure?Security is about reducing the risks of something happening and managing the outcomes. Hence, information security is about minimising and managing the risks to information. This means that it doesn’t just include how you use your computer to store your files but also how your computer is stored. Information security management considers the security of your data from your USB memory stick to your building.
The remainder of this very thought-provoking article can be read here.