one cannot have information security without having cybersecurity but cybersecurity has no true value without an understanding of the information to be secured. And though information security covers digital data in cyberspace it must not forget the analog data lying around the company.