Information security is the concept behind defending data, details, and the like to ensure that they are accessible only to those legally responsible for them or the people to whom they have been sent. In a company, information security is nothing more than the policies, processes and methods that should be employed so that the circulation of data and information is secure and controlled, preventing unwanted people from using or at least having access to this information. Having an IT department, the so-called Information Technology, prepared to take care of information security is fundamental. There are already a variety of tools that can avoid major problems and ensure the integrity and confidentiality of information, which is ultimately the primary desire of companies. Information will only be secure when users and IT professionals act accordingly, putting in place the best ways to avoid future risks.