Cryptography vs Security This may sound a little bit of basic but here it goes…

Which of the following is correct? 


“Cryptography is under the security field”, or 
“Security is under the cryptography field?”


Cryptography is all about encryption and decryption. Encryption/Decryption requires a key. Isn't security the same? Security also depends on key/password, to keep data secure. I can feel that they are co-related but I'm not clear about the differences. Can anyone clear this out?

EDIT: With the word "under" I meant pure dependency, and "Security" hints at Information Security.
The correct answer would be:


  1 . “Cryptography is under the security field”.


Let me try to explain it a bit…

Cryptography

Modern cryptography concerns itself with 4 objectives:


Confidentiality: the information cannot be understood by anyone for whom it was unintended.
Integrity: the information cannot be altered in storage or transit between sender and intended receiver without the alteration being detected.
Non-repudiation: the creator/sender of the information cannot deny at a later stage his or her intentions in the creation or transmission of the information.
Authentication: the sender and receiver can confirm each other’s identity and the origin/destination of the information.


Information Security

Now, if you look at information security (what you simply call “security”), you’ll notice that – besides the four points mentioned above – there’s a whole universe of other security-related things that information security handles. To name just a few examples of what information security  additionally covers (besides cryptography): 


risk management, 
access control, 
security classification of information,
business continuity, 
disaster recovery planning, 
laws and regulations, 
etc.


Nota Bene

In the end, this might also help you understand why StackExchange has a Security.SE – which  covers information security in general, and a Crypto.SE – which explicitly focuses on cryptographic details like algorithm design, protocol analysis, etc.



EDIT:
More of an aside, but it may help understand things even better… I just noticed that Wikipedia has a nice Contents-listing in their InfoSec article, from which you can see how Cryptography fits into Information Security as a sub-category (6.5).