LO6: Principles of information security

Question 1

What does confidentiality mean?

Answer 1

Information that can only be accessed by the individual or organisation that has permission to do so.

Question 2

What does Integrity mean?

Answer 2

Information that is maintained and kept up to date to keep its accuracy.

Question 3

What does availability mean?

Answer 3

Making the information available for the individual it belongs to and not to those who do not need it.

Question 4

What are some of the risks if these principles are not met by an organisation?

Answer 4

Risks:
Unauthorised access
Unintended access
Intentional destruction of data
Tampering with data

Question 5

What are some of the impacts if a principle is not met and this causes damage to an organisation? [Example: confidential information made public].

Answer 5

Impacts:
Loss of service and access to the data
Loss of reputation
Possible threat to national security (Government organisation)
Loss of intellectual property
Compensation and fines for the organisation