Information Security Flashcards
Information security
Information security is the preservation of confidentiality,
integrity and availability of information.
Confidentiality
The property that information is not disclosed to unauthorised individuals, entities or processes
Integrity
The property of safeguarding the accuracy and completeness of assets
Availability
The property of being accessible and usable upon demand by an authorised entity
Asset
Anything that has value to the organisation, its business operations and its continuity
Threat
A potential cause of an incident that may result in harm to a system or organisation
Vulnerability
A weakness of an asset or group of assets that can be exploited by one or more threats
Impact
The result of an information security incident, caused by a threat, which affects assets
Risk
The potential that a given threat will exploit vulnerabilities of an asset or group of assets and thereby cause harm to the organisation
