ISA

ISA:

Interconnection Security Agreement

Information Security Awareness

---

A document that regulates security-relevant aspects of an intended connection between an agency and an external system. It regulates the security interface between any two systems operating under two different distinct authorities. https://csrc.nist.gov/glossary/term/interconnection_security_agreement

---

Information security awareness is defined as an employee’s general knowledge about information security and his cognizance of the information security policy (ISP) of his organization. General information security awareness and ISP awareness are the key dimensions of ISA. General information security awareness is defined as an employee’s overall knowledge and understanding of potential issues related to information security and their ramifications. Beyond general ISA, organizations have specific expectations of their employees that are reflected in the ISP. ISP awareness is defined as an employee’s knowledge and understanding of the requirements prescribed in the organization’s ISP and the aims of those requirements. Bulgurcu et al. 2010