SECURITY PRINCIPLES

Question 1

Confidentiality

1. What it means?
2. How to uphold this information?

Answer 1

1. Information should only be accessed by groups or individuals who have the authorisation to do so.
2. Organization should use protection measures such as usernames and passwords to ensure only authorized users can access the sensitive data. Tiered access and permissions can also limit who has access data

Question 2

Integrity
What it means?
How is it upheld?

Answer 2

1. Information is maintained so that it is correct, up-to-date and fit for purpose.
2. Organizations should carry out data maintenance to update information. If data is being stored on a database or a spreadsheet, record locking can be used so that only one person can use it at a time, preventing data from becoming incorrect

Question 3

Availability
What it means?
How is it upheld?

Answer 3

1. Information is accessible to the individual or group who need to use it. it should ONLY be available to those who are authorized to see it.
2. staff should have the correct privileges to access data when required. data should be stored online for example cloud storage so that it is available remotely using an internet connection.
   Data must also be kept safe from unauthorised access. Staff should not make additional copies of information which could be lost or stolen.