A model for Information Assurance: An Integrated Approach

This model was created by John McCumber in 1991. The McCumber model provided a concise representation of INFOSEC (Information Systems Security) discipline. Historically, INFOSEC is defined as: Protection of information systems against the unauthorized access to or Modification of information, wether in storage, processing or transit and against the denialof service to authorized  users, including those measures necessary to detect, document, and counter such threats.