Cybersecurity is NOT the same as information security. Different words, different things. What is “Cybersecurity”? In order to fully appreciate the difference between information security and cybersecurity, we need to define both. Information Security The workable definition of information security that I’ve used for a decades is: Managing risk to unauthorized disclosure, alteration, and destruction of information using administrative, physical and technical controls. This is…

If you missed it: “A” is for Accountability “B” is for Business “C” is for Cybersecurity “D” is for Data And “C” is NOT for compliance. Why not? The simple answer is: Compliance is NOT information security despite what people may think. Judging from how many organizations treat compliance and information security like they’re the same, they’re not. People must be confused. Compliance has never…