Richard Omollo This paper appreciates the basic tenets of information as defined by the CIA and discusses the various Information security business models. Information security has been defined as the preservation of confidentiality, integrity, and availability, also known as the CIA triad, of information by guarding against unauthorized access, use, disclosure, disruption, alteration, and destruction of information and information systems or assets. It further simplified information security by ensuring information confidentiality, integrity, and availability. It is the aspect of ensuring information is only accessible to the right persons, protecting information from unauthorized modifications, and ensuring information is available to authorized users whenever they need it. Existing Information security business models serve as a guide in comprehending the challenges to confidentiality, integrity, and availability of known systems. This research study appreciated various business models and offered their comparative review.