IT security refers to a company's ability to protect the confidentiality, integrity and availability of their data and transactions. The current standards for IT security are ISO 27001 standard and NIST 800 standard series.