{"id":168,"date":"2026-01-08T11:26:34","date_gmt":"2026-01-08T08:26:34","guid":{"rendered":"https:\/\/ruck.nz\/?p=168"},"modified":"2026-01-08T11:50:46","modified_gmt":"2026-01-08T08:50:46","slug":"9-3-information-security-management","status":"publish","type":"post","link":"https:\/\/ruck.nz\/?p=168","title":{"rendered":"9.3. Information security management"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Information security management is the practice of protecting information needed by the organisation to conduct its business.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Its purpose is to ensure that information is appropriately protected in accordance with its importance and sensitivity.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Information security management supports confidentiality, integrity, and availability of information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The practice should balance the need for security with the need for usability and access.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Information security risks should be identified, assessed, and treated.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Information security management applies to all services and practices.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">2. How This Applies to <strong>TakeCars<\/strong> (Car Rental Marketplace)<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">This practice is <strong>quietly critical<\/strong> for marketplaces, because trust collapses instantly when information is mishandled.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">a) What \u201cinformation\u201d means at TakeCars<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Information is not just passwords or servers. It includes:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Customer identity details<\/li>\n\n\n\n<li>Driver licence data<\/li>\n\n\n\n<li>Payment and transaction data<\/li>\n\n\n\n<li>Booking history<\/li>\n\n\n\n<li>Host contact details<\/li>\n\n\n\n<li>Dispute and incident records<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Loss or misuse of any of these directly damages trust and creates legal exposure.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">b) Confidentiality, integrity, availability (CIA) in TakeCars terms<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Confidentiality<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Customer data is not exposed to other renters<\/li>\n\n\n\n<li>Hosts only see information required for the booking<\/li>\n\n\n\n<li>Support access is role-based<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Failure example:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Sending booking details to the wrong host<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">Integrity<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Booking details are accurate and not altered incorrectly<\/li>\n\n\n\n<li>Payment amounts and dates are correct<\/li>\n\n\n\n<li>Dispute records reflect what actually happened<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Failure example:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Manual edits causing incorrect charges or dates<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">Availability<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Customers and hosts can access bookings when needed<\/li>\n\n\n\n<li>Support can retrieve records during disputes<\/li>\n\n\n\n<li>Platform access during peak travel periods<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Failure example:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>System outage during holiday pickups<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">c) Balancing security and usability (very ITIL-specific)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Too much security:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Overly complex verification<\/li>\n\n\n\n<li>Excessive manual checks<\/li>\n\n\n\n<li>Friction that blocks bookings<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Too little security:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Fraud<\/li>\n\n\n\n<li>Data leaks<\/li>\n\n\n\n<li>Regulatory violations<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">ITIL explicitly requires balance, not maximum lockdown.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">d) Exam-critical insight<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If the exam asks:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u201cWhat is the purpose of information security management?\u201d<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">Correct logic:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Protect information<\/li>\n\n\n\n<li>Based on importance and sensitivity<\/li>\n\n\n\n<li>Support confidentiality, integrity, and availability<\/li>\n\n\n\n<li>Apply across all services<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Answers focused only on technology are incomplete.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">3. Key Things to Read \/ Remember Right Before the Exam<\/h1>\n\n\n\n<h3 class=\"wp-block-heading\">Information security management (high probability)<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A <strong>practice<\/strong><\/li>\n\n\n\n<li>Protects organisational information<\/li>\n\n\n\n<li>Based on CIA:\n<ul class=\"wp-block-list\">\n<li>Confidentiality<\/li>\n\n\n\n<li>Integrity<\/li>\n\n\n\n<li>Availability<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Balances security and usability<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">Common exam traps<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Information security is only an IT responsibility \u2192 False<\/li>\n\n\n\n<li>Maximum security is always best \u2192 False<\/li>\n\n\n\n<li>Information security applies only to data storage \u2192 False<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">One-line memory hook<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Information security protects confidentiality, integrity, and availability while remaining usable.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n","protected":false},"excerpt":{"rendered":"<p>Information security management is the practice of protecting information needed by the organisation to conduct its business. Its purpose is to ensure that information is appropriately protected in accordance with its importance and sensitivity. Information security management supports confidentiality, integrity, and availability of information. The practice should balance the need for security with the need [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-168","post","type-post","status-publish","format-standard","hentry","category-practices"],"_links":{"self":[{"href":"https:\/\/ruck.nz\/index.php?rest_route=\/wp\/v2\/posts\/168","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ruck.nz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ruck.nz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ruck.nz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ruck.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=168"}],"version-history":[{"count":1,"href":"https:\/\/ruck.nz\/index.php?rest_route=\/wp\/v2\/posts\/168\/revisions"}],"predecessor-version":[{"id":169,"href":"https:\/\/ruck.nz\/index.php?rest_route=\/wp\/v2\/posts\/168\/revisions\/169"}],"wp:attachment":[{"href":"https:\/\/ruck.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=168"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ruck.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=168"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ruck.nz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=168"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}