 IA is best thought of as a superset of information security (i.e.umbrella term), and as the business outcome of information risk management.Information assurance (IA) is the process of getting the right information to the right people at the right time.