09. CIA - Confidentiality, Integrity, Availability

Question 1

Confidentiality, Integrity, Availability

Confidentiality

Answer 1

Ensure no on unauthorised can access the data

Question 2

Confidentiality, Integrity, Availability

Integrity

Answer 2

Ensure data has not been altered

Question 3

Confidentiality, Integrity, Availability

Availability

Answer 3

Ensure authorized people can access data when they need

Question 4

Confidentiality, Integrity, Availability

CONFIDENTIALITY:
Threats

Answer 4

1. Attacks on encryption
2. Social engineering
3. Key Loggers
4. IoT

Question 5

Confidentiality, Integrity, Availability

CONFIDENTIALITY:
We use

Answer 5

1. Encryption - data at rest
2. Secure Transport Protocols - data in motion
3. Best Practices - data in use
4. Secure protection

• Secure protection = strong passwords, MFA, masking, access control, neet to know, least privilege
• Best practices = Clean desk, no shoulder surfing, screen view protector, PC locking

Question 6

Confidentiality, Integrity, Availability

INTEGRITY:
Threats

Answer 6

1. Alterations to data
2. Code injection
3. Attacks on your encryption

Question 7

Confidentiality, Integrity, Availability

INTEGRITY:
We Use

Answer 7

1. Cryptography
2. Checksums
3. Message Digests (MD5 Hashing, SHA1, SHA2)
4. Digital Signatures
5. Access Control

Question 8

Confidentiality, Integrity, Availability

AVAILABILITY;
Threats

Answer 8

1. Malicious Attacks (DDoS, Physical, system compromise)
2. Application Failure (code error)
3. Component failure (hardware)

Question 9

Confidentiality, Integrity, Availability

AVAILABILITY;
We Use

Answer 9

1. IPS/IDS
2. Patch Management
3. Redundancy, HA, Failover
4. SLAs - Uptime targets

ROI - Return on Investment

• Need to factor in fiscal elements to redundancy
• What priority are systems, is it worth the cost of making them ultra HA or redundent?

Question 10

Confidentiality, Integrity, Availability

CIA Opposites

Answer 10

Confidentiality ==> Disclosure
Integrity ==> Alteration
Availability ==> Destruction

CIA ==> DAD

• REMEMBER American DAD - CIA agent