Guide for the security certification and accreditation of federal information systems
Ron Ross, M Swanson, Gary Stoneburner, S Katzke, L A Johnson · 2004
1 Information security is the protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide confidentiality, integrity, and availability. 2An information system is a discrete set of information resources organized expressly for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information.3 Agency operations include such things as mission, functions, image, and reputation. 4Security controls are the management, operational, and technical controls (i.e., safeguards or countermeasures) prescribed for an information system to protect the confidentiality, integrity, and availability of the system and its information.