What is INFOSEC?

• A. The protective measures to deny unauthorized information from telecommunications
• B. The system of policies, procedures, and requirements established to protect information
• C. A formal program that identifies and protects sensitive but unclassified information that ensures mission success
• D. The protection of physical assets

Answer: (B)

INFOSEC is the system of policies, procedures, and requirements used to protect information and the information systems that process it. It isn’t just about technology; it covers governance, risk management, classification, access controls, training, and incident handling so that information remains confidential, maintains integrity, and stays available. That broad, programmatic approach is why this option is the best match: it describes the overall framework that organizations use to safeguard information across its life cycle and across environments.

The other descriptions are narrower or emphasize a specific area. Focusing on protecting information from telecommunications is about a particular channel rather than the whole protection program. Highlighting sensitive but unclassified information narrows the scope to a subset rather than the full protection effort. Protecting physical assets centers on tangible items, not information and information systems.