Problems of Developing Information Security Policy

Abstract

In this article we consider business needs for information security and discuss information security threats, vulnerabilities, explain the concepts of confidentiality, integrity, availability, non-repudiation, authentication, and authorization. The study concerns information security technologies, policies, and technical control which can be applied to solve or reduce the risks of data breach and data theft. We also take into consideration benefits of effective protection measures against data breaches.