Information Security

What is the difference between information security and IT security?

To put it simply: Information security protects all relevant information (we call it data when stored) and is therefore a specialized task, while IT security is primarily concerned with protecting IT systems, networks and their security.

Grid containing content elements

Basic Overview of IT Security and Information Security Topics

More about Basic Overview of IT Security and Information Security Topics

Obviously, the distinction cannot be drawn with the sharpness and clarity suggested by this overview. However, the chart shows the different focus of the two security disciplines. While IT security primarily focuses on protecting your systems and devices, information security focuses on the information required to fulfill the university's core tasks.

Information security is divided into eight pillars at UZH for the sake of simplicity. The pillars are based on the ISO 27001 standard and the NIST cybersecurity framework.

The chart here summarizes the eight pillars in 4 main pillars.