The goals of information security are to ensure the continued confidentiality, integrity, and availability of an organization’s assets.

The major tools for achieving information security are the security features of a system: authentication, authorization, and auditing. You may also need cryptography and key management.

See also my posts on Information Security.