Infokaitse

Infokaitse, or information security, refers to the protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction. It aims to ensure the confidentiality, integrity, and availability of information (the CIA triad) and to support reliable operations, privacy, and compliance with laws.

It covers organizational governance and policy, risk management, technical controls such as encryption and access control, network and system security, incident response, business continuity, physical security, and personnel awareness.

In Estonia, infokaitse is supported by a national information security policy and agencies such as Riigi Infosüsteemi Amet (RIA), which oversees critical infrastructure protection, digital identities, and cyber defence. The term appears in policy, legislation, and public administration to describe measures that safeguard state information systems and private data.

Standards and frameworks commonly used in infokaitse include ISO/IEC 27001 for information security management systems and the NIST Cybersecurity Framework, adapted to local legal requirements and sector-specific needs.

As digital government and online services expand, infokaitse remains central to protecting privacy, maintaining trust, and ensuring resilience against evolving cyber threats.