Our orders are delivered strictly on time without delay
Discuss and describe the CIA Triad.
What are the requirements to hold a person accountable for the actions of their user account?
Name the six primary security roles as defined by (ISC)2 for CISSP.
What are the four components of a complete organizational security policy and their basic purpose?
The CIA Triad is the foundational model for cybersecurity, and security management involves clear definitions of roles, responsibilities, and accountability mechanisms.
The CIA Triad is a security model that represents the three core goals of information security: Confidentiality, Integrity, and Availability. Protecting information systems means ensuring these three characteristics are balanced and maintained.
Confidentiality: Ensures that sensitive information is kept secret and is only accessed by authorized personnel. This involves protecting against unauthorized disclosure.
Methods: Encryption, access control lists (ACLs), strong authentication (passwords, multi-factor authentication), and physical security.
Integrity: Ensures that data is complete, accurate, and protected from unauthorized modification or destruction. This involves maintaining the trustworthiness of the data.
Methods: Hashing (to verify files haven't changed), digital signatures, intrusion detection systems, version control, and rigorous change management processes.
Availability: Ensures that authorized users can reliably access information and resources when and where they need them. This involves maintaining system uptime and functionality.
Methods: Redundancy (failover systems, redundant hardware), backups, disaster recovery plans (DRP), business continuity planning (BCP), and defense against denial-of-service (DoS) attacks.
To hold a person accountable for the actions of their user account, three primary requirements must be met, ensuring the principle of non-repudiation:
Identification: The user must claim an identity before accessing the system (e.g., entering a username).