6.1 Security principles

Question 1

What are the 3 key principles of data security

Answer 1

Confidentiality
Integrity
Availability

Question 2

What does confidentiality mean

Answer 2

Information should only be accessed by individuals or groups with correct authorisation

Question 3

How to uphold confidentiality

Answer 3

Use protection measures like usernames and passwords to ensure only authorised people can access the sensitive data. Tiered levels of access or permissions can also limit who has access to the data

Question 4

What does integrity mean

Answer 4

Information is maintained so that its up-to-date, correct and fir for purpose

Question 5

How to uphold integrity

Answer 5

Carry out regular maintenance to update information

Question 6

What does availability mean

Answer 6

Information is available to the individuals or groups that need to use it. It should only be available to those who are authorised.

Question 7

How to uphold availability

Answer 7

correct privileges to easily access data when required. E.g. could be stored on the cloud for remote availability. It must also be kept safe from unauthorised access . unneeded copies shouldn’t be made (could be lost or stolen)