The main defining difference between computer security and information security is that computer security mainly considers security through the medium of technology, whereas information security is more focused on information itself. Information security could pertain to any information regardless of its media form. In addition, computer security deals with the security of hardware and software, and typically only secures information by extension. Information security is focused not on technology, but information. Information security is an application of social science because humans are the main threat to information security itself. Understanding how and why humans would seek to threaten information security is the basis for keeping information secure. Information itself is not at risk unless there are humans that wish to exploit it.