Information Assurance
The UK National Information Assurance Strategy defines Information Assurance as the confidence that information systems will protect the information they handle and will function as they need to, when they need to, under the control of legitimate users.
Confidentiality, Integrity, Availability
Often referred to as CIA, the three pillars of Information Assurance (IA) vary according to the sensitivity of information, perceived threats, business risks and affordability, but to provide true value for money, CIA needs to be designed into the solution.
EADS is one of very few organisations that can design CIA solutions effectively, as this requires an in-depth knowledge of the IA domain combined with the capabilities of a system integration house.
Confidentiality
Confidentiality refers to measures we take to maintain the privacy or secrecy of our data and information. In essence, Confidentiality is based around a “need to know” requirement that limits access to approved users and protects the information while in storage, during processing and when in transit. As the UK’s lead provider of IP cryptography and key management systems EADS is ideally positioned to protect confidentiality.
Integrity
A combination of techniques, ranging from Intruder Protection Systems and heuristic monitoring systems through to audit logs and independent non-repudiation assurance, is required to deliver Integrity. Many of these techniques are included within EADS’ service offering and we actively monitor the marketplace in order to incorporate additional techniques as they become available. EADS also provides synthetic environments and Critical National Defence simulators that allow personnel to be trained in IA techniques without placing live systems at risk.
Availability
Availability refers to the ability to access information or data where it is needed, when it is needed. This aspect of IA also includes disaster recovery and business continuity which deals with how we apply technology and practices to help keep data availability high during an accident, disaster or security breach.
EADS in Information Assurance
As a provider of safety-critical systems to the aeronautical and space industries and high assurance secure networks to customers such as the Ministry of Defence, EADS Defence and Security has a comprehensive understanding of IA requirements together with an extensive product, systems and services delivery capability. EADS also works with government and academia undertaking research and development of IA technologies ranging from data fusion solutions through to decision support tools. Our R&D capabilities can also be linked to our synthetic environments that model our customer’s requirements and demonstrate the effectiveness of potential solutions before the customer commits to expensive programmes. As a leading industry partner contributing to a number of IA policy bodies, EADS is helping to drive the future of IA. EADS also has a broad IA portfolio and proven delivery capability and is therefore the partner of choice to deliver IA solutions.