Information security is an essential enabler for the protection of privacy and personal data. Moreover, most organisations must deal with an ever-changing landscape affecting their operations. Uncertainties created by such changes will affect how the organisation needs to react in order to ensure that its information assets are suitably protected. Therefore, there is a need for a specific framework that helps individuals responsible for information security to manage the uncertainties which might affect the security of their organisation's information over time. Such a framework for a specific organisation is referred to as Information Security Risk Management process.
There are three generally accepted elements to properly secure information.
Opinion on a research project funded by the European Union under the Seventh Framework Programme (FP7) for Research and Technology Development - Turbine (TrUsted Revocable Biometric IdeNtitiEs)
Opinion on the Proposal for a Regulation of the European Parliament and of the Council concerning the European Network and Information Security Agency (ENISA)
Opinion on the proposal for a Regulation of the European Parliament and of the Council on the citizens' initiative
See also the proposal for a Regulation of the European Parliament and of the Council on the citizens’ initiative
Opinion on the Proposal for a Directive of the European Parilament and of the Council on waste electrical and electronic equipment (WEEE)
Proposal for a Directive of the European Parliamant and of the Council on waste electrical and electronic equipment (WEEE)
Opinion on the proposal for a Regulation establishing an Agency for the operational management of large-scale IT systems in the area of freedom, security and justice, and on the proposal for a Council Decision conferring upon the Agency tasks regarding the operational management of SIS II and VIS in application of Title VI of the EU Treaty, OJ C 70, 19.03.2010, p.13