Information security is the study and practice of protecting information, which is important because information is valuable. Organizations need data to conduct business. Governments need information to protect their citizens. Individuals need information to interact with businesses and government agencies, as well as stay in touch with friends and family over the web. Information is a critical resource that must be protected.

The main goal of information security is to protect the confidentiality, integrity, and availability of information. Basic information security concepts include vulnerabilities, threats, risks, and safeguards.