CHAPTER 1:

INTRODUCTION TO
INFORMATION SECURITY

KRISTIE CLEOPHAS GOROTUD

Jan 2021
CONTENT

 DEFINITION OF INFORMATION SYSTEMS

 COMPONENTS OF INFORMATION SYSTEMS
 WHAT IS INFORMATION SECURITY
 APPROACHES TO INFORMATION SECURITY
 IMPLEMENTATION
DEFINITION OF INFORMATION SYSTEM

an integrated set of components for collecting,

storing, and processing data and for
providing information, knowledge, and digital
product.
COMPONENTS OF INFORMATION
SYSTEMS
1) Hardware- a computer and its peripheral equipment: input, output, and storage
devices
 Computer
 Smartphone
 Tablets

2) Software- sets of instruction that tell the computer how to take data in, how to
process it, how to display information, and how to store data and information
 Two categories
a) system software –manage computer, data, program files
b) application software- handle specific tasks for user
3) Network- hardware and software that facilitate fast transmission and reception
of text, pictures, sound and animation in the form of electronic data
 E.g Local area network (LAN)

4) Data- input that the system takes to produce information

 E.g employee record
 Data stored in database

5) People- information system professionals and users who analyze organizational

information needs, design and construct information systems, write computer
programs, operate the hardware, and maintain software
 E.g database administrator, manager
WHAT IS INFORMATION SECURITY

Designed to protect the confidentiality,

integrity and availability (CIA) of
computer system data from those with
malicious intentions.
Confidentiality

 Information which is sensitive or confidential must remain so and be shared

only with appropriate users.
 For example, our confidential medical records should be released only to
those people or organizations authorized to see it.
 i.e. doctor, hospital, insurance, government agency, you.
Integrity

 Information must retain its integrity and not be altered from its original state.
 The records should be well protected so that no one can change the
information without authorization.
Availability

 Information and systems must be available to those who need it.

 The records should be available and accessible to authorized users
APPROACHES TO INFORMATION
SECURITY IMPLEMENTATION
 Birokrasi

 Definisi :
 1 sistem pemerintahan yg
dijalankan oleh pegawai-
pegawai yg tidak dipilih oleh
rakyat.
 2 cara pemerintahan yg sangat-
sangat dikuasai oleh pegawai
kerajaan.
 3 cara pentadbiran yg banyak
melibatkan peringkat dan
peraturan.
Thank you
Tutorial

1. State 5 components of information system (5 marks)

2. What is the definition of Information Security? (3 marks)
3. Give two categories of software (2 marks)
4. Distinguish Top-down and Bottom-up approaches to Information Security
Implementation (10 marks)