Human aspect --- Juan, a very important point that you raise: human dimension.

In context of information security, operational professionals (CISOs etc) consider process and policies for handing an IT system by users of great relevance - together with technical means for cybersecurity protection; many international standards like ISO 27001 on certification for information security put lots of focus on policies and processes. But what you (or this CISCO definition) suggest is that we can probably understand information security and IT security as being the same?

Source author: Vladimir Radunovic vladar@diplomacy.edu