What are spheres of security? Provide examples illustrating the different components.

Question

What will be an ideal response?

Answer 1

Spheres of security are the generalized foundation of a good security framework and can be considered a type of best practice recommendation. Generally speaking, they illustrate how information is under attack from a variety of sources. The sphere of use, illustrates the ways in which people access information. For example, systems users are intended to access information through systems. Information, the most important asset, is at the center of the sphere. It is always at risk from the people and computer systems that have access to it. Networks and the Internet represent indirect threats, because a person attempting to access information from the Internet must first go through the local networks and then access systems that contain the information. The sphere of protection, shows that between each layer of the sphere of use there must exist a layer of protection to prevent the outer layer from accessing the inner layer. Each shaded band is a layer of protection and control. For example, the items labeled "Policy & law" and "Education & training" are located between people and the information.