week-2_ssusususuususususuusussuususus.pptx

sasasas

1. Cybersecurity vs Information Security Understanding the Key Differences Mandip Raut 5CS018 Cyber Security Architecture and Operations 29/08/2025

2. Why This Topic Matters Both terms are often confused or used interchangeably . Knowing the difference is critical for security strategy, compliance, and roles . Helps in designing clear policies and responsibilities .

3. What is Information Security? Protecting information in all forms (digital or physical) from unauthorized access, disclosure, alteration, or destruction. Core Goal: CIA Triad: Confidentiality – Only authorized access. Integrity – Data is accurate and unchanged. Availability – Data is accessible when needed. Examples: Locking file cabinets with sensitive documents. Encrypting company databases.

4. What is Cybersecurity? Definition: Protecting digital assets (systems, networks, applications) from cyberattacks. Scope: Networks, servers, applications, cloud, endpoints. Examples: Using firewalls, IDS/IPS. TLS encryption for web traffic. Antivirus and VPN.

5. Key Differences Feature Information Security Cybersecurity Scope All info: physical + digital Digital assets only Goal CIA Triad Prevent cyber threats Threats Theft, physical loss Hacking, malware, phishing

6. Relationship Information Security is a Big Umbrella Cybersecurity is a Subset of Information Security. Analogy: InfoSec: Protecting the entire house (doors, locks, alarms). Cybersecurity: Protecting digital parts (Wi-Fi, smart devices).

7. Real-World Examples Information Security: Implementing framework of policies, procedures, and controls to manage information risks. Securing physical storage rooms. Cybersecurity: Using TLS for secure web connections. Deploying IDS/IPS against hackers.

8. Why Both Are Important ? Compliance: GDPR (General Data Protection Regulation in Europe), HIPAA (Health Insurance Portability and Accountability Act in the US), Privacy Law of Nepal require both. Risk Management: Holistic protection for all assets. Cybersecurity alone is not full security (ignores physical risks).

9. Summary InfoSec is a Broader concept that include physical and digital information. Cybersecurity is a Subset that focuses on cyber threats. Both are essential for a complete security strategy .