Which term best fits the overarching practice of protecting information and information systems?

• A. Daisy Chaining
• B. Information Security
• C. Hack Value
• D. Worm

Answer: (B)

Information security is the umbrella practice for protecting information and information systems from unauthorized access, disclosure, modification, or destruction, and for ensuring availability. It centers on the CIA triad—confidentiality, integrity, and availability—and uses a mix of governance, policies, procedures, and technical controls to manage risk. Think of it as the discipline that covers authentication and access control, encryption, secure coding, patch management, backups, monitoring, incident response, and disaster recovery. The other terms don’t fit this role: daisy chaining describes connecting devices in sequence, which can introduce security weaknesses rather than protect assets; a worm is a type of malware, not a protective practice; and hack value isn’t a standard term for information protection.