3. IT security is only a means to information security

3.1 Impacts feared by the company

The information system is the main tool of any company; it is the vector of the business and enables activities to produce with performance and conformity.

An IT risk affects the availability, confidentiality or integrity of an IT service, which in turn has an impact on the business. This will most often result in a financial, image, compliance or even quality deficit, which needs to be specified for each type of IT risk.

The risk analysis must establish this cause-and-effect relationship and scale it down to the feared impact. It is essential to conduct this analysis as an identification of the safety process.

This phase establishes the link between the threat, system vulnerabilities,...