Information security deals with information, regardless of its format—it encompasses paper documents, digital and
intellectual property in people’s minds, and verbal or visual communications. Cybersecurity, on the other hand, is
concerned with protecting digital assets—everything from networks to hardware and information that is processed,
stored or transported by internetworked information systems. Additionally, concepts such as nation-state-sponsored
attacks and advanced persistent threats (APTs) belong almost exclusively to cybersecurity. It is helpful to think of
cybersecurity as a component of information security.