Information security is the practice of protecting information by mitigating information risks. It is part of information risk management. From Wikipedia