The IT core of any organization is its mission-critical systems. These are systems without which the
mission of the organization, whether building aircraft carriers for the U.S. military or packaging
Twinkies to deliver to food markets, could not operate. The major components to protecting these
systems are detailed throughout this chapter; however, with special emphasis on the big picture
an information security manager must keep in mind, there are some key components that are
crucial for the success and continuity of any organization. These are information assurance,
information risk management, defense in depth, and contingency planning.