Fundamental to the FISASCORE™ is our definition of "information security". Our definition was covered earlier, but here it is again;
Information security is the application of administrative, physical, and technical controls to protect the confidentiality, integrity, and availability of information.
There are four Phases within the FISASCORE™; Phase 1 – Administrative Controls, Phase 2 – Physical Controls, Phase 3 – Internal Technical Controls, and Phase 4 – External Technical Controls. All four parts of the information security program must work well together. A weakness in one control (or area) can lead to a collapse of all others. The Phases are further segmented into Sections, and the Sections are further segmented into Controls. The FISASCORE™ report is presented in a manner that is like pulling back the layers of an onion; you start high-level, then dig into the details as necessary.
processing
