Resumen
The article looks at the risk involved in information security. Information security is akin to the practice of alchemy in ancient times when there were only four known elements: air, water, fire, and earth. Authors Tom Slewe and Mark Hoogenboom in "Who Will Rob You on the Digital Highway?" covered confidentiality, integrity, and availability, the well-known elements of information security as they are used in many organizations' security policies. Information security involves six elements: confidentiality, possession, integrity, authenticity, availability, and utility. It is generally accepted that information security targets risk reduction through assessment of probabilistic risk and pursuit of risk management. Risk of rare loss incidents is neither measurable nor controllable and therefore not manageable for a specific organization. The future frequencies and effects of incidents for specific organizations in specific security settings are determined by unknown enemies, not by victims.