Information Stream Based Model for Organizing Security

One of the most important aspects of security organization is to establish a framework to identify security-significant points where policies and procedures are declared. The (information) security infrastructure comprises entities, processes, and technology. All are participants in handling information, which is the item that needs to be protected. Our approach is to identify information stream as the principal focus of security consideration, and it is based on recognizing points of transformation in the flow of information as the pivots around which security organization is built. The information stream model is a general, coherent blueprint of security organization without getting into details of specific technology, policies, or practices.

I. INTRODUCTION

Current needs in information security require the integration of policies and user responsiveness to security policies, into addition to technology-based solutions. This is the Information Assurance approach, encompassing aspects of information characteristics, information states, and security measures at the levels of technology, policy and human interfaces. According to Beauregard [3], “IA is not a synonym for computer security; assurance is a much more robust concept that captures the entire process of defending one's information, information systems, and information processes.”