Chapter 1: Introduction

Question 1

What is the definition of Computer Security according to the NIST Computer Security Handbook?

Answer 1

The protection afforded to an automated information system in order to attain the applicable objectives of preserving the integrity, availability, and confidentiality of information system resources (includes hardware, software, firmware, information/data, and telecommunication)

Question 2

What are two terms related to confidentiality?

Answer 2

1. Data confidentiality: assures that private or confidential information is not made available or disclosed to unauthorised individuals.
2. Privacy: assures that individuals control or influence what information related to them may be collected and stored and by whom and to whom that information may be disclosed.

Question 3

What are two terms related to integrity?

Answer 3

1. Data integrity: assures that data and programs are changed only in a specified and authorised manner.
2. System integrity: assures that a system performs its intended function in an unimpaired manned, free from deliberate or inadvertent unauthorised manipulation of the system

Question 4

What is authenticity?

Answer 4

The property of being genuine, verifiable and trusted. Being able to verify that users are who they say they are and that inputs come from trusted sources.

Question 5

What is accountability?

Answer 5

Actions performed by an entity need to be traceable to that entity. Supports non-repudiation, deterrence, fault isolation, intrusion detection and prevention, after-action recovery and legal action.

Question 6

There are three levels of impact when a breach of security occurs, what levels are they and what do they mean?

Answer 6

Low:
- Limited adverse effect.
- degradation in mission capability, primary functions can still be performed albeit (noticeably) less effectively
- minor damage to assets
- minor financial loss
- minor harm to individuals.

Moderate:
- Serious adverse effect.
- significant degradation in mission capability, primary functions can still be performed but at significantly reduced effectiveness
- significant damage to assets
- significant financial losses
- significant harm to individuals, however not life threatening.

High:
Severe or catastrophic adverse effect.
- severe degradation or loss of mission capability resulting in inability to perform one or more of its primary functions
- major damage to assets
- major financial loss
- Severe or catastrophic harm to individuals like loss of life or life threatening injuries