Toward a New Framework for Information Security?

This chapter presents a new information security framework that resolves the problems of the existing models. The chapter emphasizes that information security, historically, has been limited by the lack of a comprehensive, complete, and analytically sound framework for analysis and improvement. The persistence of the classic triad of CIA (confidentiality, integrity, availability) is inadequate to describe what security practitioners include and implement when doing their jobs.

The chapter introduces new information security framework and demonstrates the need for six security elements—availability, utility, integrity, authenticity, confidentiality, and possession—to replace incomplete CIA security in the new security framework. This new framework is used to list all aspects of security at a basic level. The framework is also presented in another form, the Threats, Assets, Vulnerabilities Model, which includes detailed descriptors for each topic in the model.

This model supports the new security framework, demonstrating its contribution to advance information security from its current technological stage.