In Europe, the purpose of security policies on information (the contents) and information systems (the container) is to protect the information (integrity), to guarantee its terms of access (availability, confidentiality, identification of correspondents) and its evidential value (authentication, non-reputability). These properties are essential in order to guarantee the independent execution of state policies, as well as the reliable use of IT in important socioeconomic areas (online exchanges for administrations, trade, education, health, etc.).
Three types of actors are affected by these applications and by Information security – currently dubbed ‘Infosec’ – that underpins them:
the citizen, particularly concerned with personal...