I work in the information assurance area at Johns Hopkins University Applied Physics Lab. I am a senior IA professional. When did network and computer security become "information assurance," and why? I do understand that the idea of "information assurance" (IA) sounds broader than "computer and network security," but is it really? The "I" in "IA" is broader, but practically IA addresses information on computers and networks, not information residing in file cabinets or on bookshelves.
Why and when did this change?

