SECURITY PRINCIPLES

Question 1

Confidentiality

Answer 1

Confidentiality relates to permitting authorized access to information, while at the same time protecting information from improper disclosure.

Question 2

Integrity

Answer 2

Integrity is the property of information whereby it is recorded, used and maintained in a way that ensures its completeness, accuracy, internal consistency and usefulness for a stated purpose.

Question 3

Availability

Answer 3

Availability means that systems and data are accessible at the time users need them.

Question 4

Confidentiality-related terms (3)

Answer 4

-Personally Identifiable Information (PII)
-Protected health information (PHI)
-Classified or sensitive information

Question 5

Sensitivity

Answer 5

 sensitivity is a measure of the importance assigned to information by its owner, or the purpose of denoting its need for protection.

Question 6

The concept of integrity applies to:

Answer 6

-information or data
-systems and processes for business operations
-organizations
-people and their actions

Question 7

Data Integrity

Answer 7

Data integrity is the assurance that data has not been altered in an unauthorized manner. This to ensure that it is free from improper modification, errors or loss of information and is recorded, used and maintained in a way that ensures its completeness.
 Data integrity covers data in storage, during processing and while in transit.

Question 8

System integrity

Answer 8

System integrity refers to the maintenance of a known good configuration and expected operational function as the system processes the information. Ensuring integrity begins with an awareness of state, which is the current condition of the system.

Question 9

Authentication

Answer 9

Authentication is a process to prove the identity of the requestor.

There are three common methods of authentication:

-Something you know/(Knowledge-Based): Passwords or paraphrases

-Something you have/(Token Based): Tokens, memory cards, smart cards

-Something you are/(Characteristic Based): Biometrics , measurable characteristics

Question 10

Authorization

Answer 10

The right or permission that is granted to a system entity to access a system resource

Question 11

Integrity

Answer 11

The property that the data has not been altered in an unauthorized manner

Question 12

Confidentiality

Answer 12

The characteristic of data or information when it’s not made available or disclosed to unauthorized persons

Question 13

Privacy

Answer 13

The right of an individual to control the distribution of information about themselves

Question 14

Availability

Answer 14

Ensuring timely and reliable access to and use of information by authorized users

Question 15

Non-repudiation

Answer 15

The inability to deny taking an action, such as sending an email message

Question 16

Authentication

Answer 16

Access control process that compares one or more factors of identification to validate that the identity
claimed by a user or entity is known to the system.

Question 17

-HIPPA
-GDPR

Answer 17

-Health Insurance Portability and Accountability Act (America)
-General Data Protection Regulation (Europe)