Introduction to Information SecurityChapter 2: Security 29Chapter 2This chapter explains the basic security concepts.This chapter includes the following topics:Introduction to Information Security ..........................................................29The Nokia IP60 Firewall ............................................................................32Introduction to Information SecurityNetwork security is but a small part of information security, which in turn is only a fraction of generalsecurity. In order to understand why the IP60 appliance is the best product for securing the businessnetwork, we must first examine information security requirements in general.Information is Valuable!The most valuable asset an organization has is its information. The type of information maintained by anorganization depends on the organization's type and purpose. For example:Almost every organization stores information about its operations, such as employees' names andother personal details, salaries, and so on.Depending on the role of different governmental offices, they may store personal informationabout citizens, residential addresses, car licenses registration, and so on.The army stores information about its soldiers, weapons inventory, and intelligence informationabout other armies. Much of this information is confidential.A bank stores information about its customers' accounts, their money transactions, ATM machineaccess codes, and so on. Much of this information is confidential.Commercial companies store information about their revenues, business and marketing plans,current and future product lines, information about competitors, and so on.Just as the type of information may differ from organization to organization, the form in which it is storedmay vary. For example, some forms of information are:Information recorded in written media, such as paper documents, books, and filesKnowledge that is stored in a person's mind and can be exchanged verballyInformation stored on electronic media, such as computers' hard drives, CDs, and tapesThe form in which an organization stores its information may make the information more or less accessibleto people outside the organization.Why Protect Business Information?There are various reasons why it is necessary to protect business information:Security
