Security Standards, such as ISO27001, talk about protecting the Confidentiality, Integrity and Availability of information.
- Loss of Confidentiality is embarrassing, can damage a business’s reputation, result in regulatory fines, and can have legal consequences to the directors.
- Loss of data Integrity means you no longer trust what the business is doing or saying: incorrect orders, false wage payments to non-existent employees, abusive PR from a hacked Twitter account or Website.
- Loss of data availability means you have no information to act on. No customers, no orders, no finances.
These are all Business Issues, not fundamentally technical issues.
