title: Reasons in Support of Data Security and Data Security Management as Two Independent Concepts:A New Model.
abstract: BACKGROUND
  Any information which is generated and saved needs to be protected against accidental or intentional losses and manipulations if it is to be used by the intended users in due time. As such, information managers have adopted numerous measures to achieve data security within data storage systems, along with the spread of information technology.
  
  
  BACKGROUND
  The "data security models" presented thus far have unanimously highlighted the significance of data security management. For further clarification, the current study first introduces the "needs and improvement" cycle; the study will then present some independent definitions, together with a support umbrella, in an attempt to shed light on the data security management.
  
  
  RESULTS
  Data security focuses on three features or attributes known as integrity, identity of sender(s) and identity of receiver(s). Management in data security follows an endless evolutionary process, to keep up with new developments in information technology and communication. In this process management develops new characteristics with greater capabilities to achieve better data security. The characteristics, continuously increasing in number, with a special focus on control, are as follows: private zone, confidentiality, availability, non-repudiation, possession, accountability, authenticity, authentication and auditability.
  
  
  CONCLUSIONS
  Data security management steadily progresses, resulting in more sophisticated features. The developments are in line with new developments in information and communication technology and novel advances in intrusion detection systems (IDS). Attention to differences between data security and data security management by international organizations such as the International Standard Organization (ISO), and International Telecommunication Union (ITU) is necessary if information quality is to be enhanced.
authors.affiliation: Health Information Management & Medical Informatics, Department of Health Information Technology and Management, Faculty of Paramedical Sciences, Shahid Beheshti University of Medical Sciences. Tehran, Iran.
authors.forename: Hamid
authors.initials: H
authors.lastname: Moghaddasi
authors.affiliation: Faculty of Paramedical Sciences, Shahid Beheshti University of Medical Sciences. Tehran, Iran.
authors.forename: Samad
authors.initials: S
authors.lastname: Sajjadi
authors.affiliation: Medical Informatics, Faculty of Paramedical Sciences, Shahid Beheshti University of Medical Sciences, Tehran, Iran.
authors.forename: Mehran
authors.initials: M
authors.lastname: Kamkarhaghighi
keywords: CIA Triad Model; Cryptography; Data security; Data security management; Data security theories; Parkerian Hexad Model