What is security and information security? What is the difference?

Security refers to the general protection of assets from various forms of harm, loss, or danger. It is a broad concept that applies to physical property, personal safety, or financial assets.

Information security, also known as InfoSec, is a specialized field focused on protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction. Its primary objectives are to ensure the confidentiality, integrity, and availability (CIA) of information, as discussed in texts like Joseph Migga Kizza’s Guide to Computer Network Security.

The distinction is that security is a comprehensive term for safeguarding anything of value, whereas information security is a specific discipline within the broader security domain. Information security deals exclusively with the protection of data and the systems that process, store, and transmit it, while general security encompasses a wider array of protective measures across all types of assets and environments.