Information security is the practice of protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction. It focuses on safeguarding information in all its forms, whether digital, printed, or spoken, to ensure confidentiality, integrity, and availability. Confidentiality ensures that information is accessible only to authorized individuals, integrity ensures that information remains accurate and unaltered except by authorized actions, and availability ensures that information is accessible to authorized users whenever required. Information security involves policies, procedures, technologies, and human awareness measures designed to manage risks related to information assets and to protect them from threats such as cyberattacks, data breaches, theft, natural disasters, and human errors. Information security is broader in scope and is concerned with protecting information regardless of the medium in which it exists. This includes data stored on computers, transmitted over networks, printed on paper, or communicated verbally. It addresses technical controls such as encryption, access control, firewalls, and