استراتيجية أمن المعلومات

Abstract EN

Information is the most important asset in any project, therefore there is a need to protect and ensure its privacy, integrity and availability.

The most important factors in developing and maintaining information security are the development of policies and procedures for its protection.

Security Strategy is fundamental for information security in any organization, so the written and the executed policy should contains sufficient information about what must be done to protect the information and employees in the organization.

Even the security strategy establishes the rules for using the computer by employees regarding their actual duties.

Managers of organizations must approve the fact that security risks exist and that is necessary to avoid them, control and supervising execution require a consistent plan, in addition to the interaction of all the staff of the organization in this, which in turn will lead to the success of information security management.

Therefore, the aim of the establishment and implementation of the security strategy is to improve the availability of information, and its integrity and its privacy, inside the organization and outside it.

In this study, we will analyze the information security and clarify it and present its importance, its objectives and its elements.

Then, we will show some risks facing the information security and propose some solutions.

Finally, we will illustrate the elements of strategy of information security through the determination of its concept, its objectives, its properties and its requirements, and the presentation of components and steps of the conception of security strategy which ensure the protection of the information.