IT security

MDCG's cybersecurity guidance distinguishes IT security, information security and operational security, following ENISA. For devices, all three are needed to keep the device safe and working.

IT Security: this term is generally understood as the protection of computer systems from adverse effects on assets including hardware, software or electronic data, as well as from disruption or misdirection of the services they provide. In relation to IT security, ENISA defines the term Communication Security Domain as "Protection against a threat to the technical infrastructure of a cyber system which may lead to an alteration of its characteristics in order to carry out activities which were not intended by its owners, designers or users".

MDCG 2019-16 Rev.1, Section 2.1, IT Security, Information Security, Operation Security