Information Security Concepts

Front

Information Security

Back

Refers to the protection of data resources from unauthorized access, attack, theft, or damage.

Front

CIA Triad

Back

Confidentiality, Integrity, Availability

Front

Confidentiality

Back

Information can only be read by people who have been explicitly authorized to access it.

Front

Integrity

Back

Data is stored and transferred as intended, and any modification is authorized.

Front

Availability

Back

Information is readily accessible to those authorized to view or modify it.

Front

Non-repudiation

Back

A person cannot deny doing something, such as creating, modifying, or sending a resource.

Front

Cybersecurity Framework

Back

Refers to provisioning secure processing hardware and software, classified into five functions by NIST.

Front

Identify

Back

Develop security policies and capabilities. Evaluate risks, threats, and vulnerabilities and recommend security controls to mitigate them.

Front

Protect

Back

Procure/develop, install, operate, and decommission IT hardware and software assets with security as an embedded requirement of every stage of this operation's lifecycle.

Front

Detect

Back

Perform ongoing, proactive monitoring to ensure that controls are effective and capable of protecting against new types of threats.