Assurance awareness SecAware

Assurance is a valuable, generally-applicable form of information security control. Assurance measures increase confidence in things, generating trust by checking, reviewing, testing, auditing and generally poking into situations. Although this is an unusual topic, assurance is a widespread issue, stretching well beyond the obvious assurance-related functions such as Audit and QA. which makes it a surprisingly strong candidate for security awareness and training purposes. Assurance is about knowing – being sure or certain of something – not just the confident state of mind but the activities that achieve it … or fail to do so. In uncertain situations or circumstances, assurance can be an extremely valuable quality, particularly where uncertainties concern information that is important to the organization. Assurance reduces the uncertainty element of risk. Assurance is a relative, not an absolute state: there are levels or degrees of assurance depending on factors such as: The com...