6.1 Principles of information security

What are the 3 principles of information security?

• Confidence, Integrity, Accountability

• Confidentiality, Integrity, Availability

• Configuration, Information, Acceptance

• Countermeasure, Intrusion, Access

Information can only be accessed by individuals, groups or processes authorized to do so

• Confidentiality

• Integrity

• Availability

Information is maintained, so that it is up to date, accurate, complete and fit for purpose.

• Confidentiality

• Integrity

• Availability

Information is always available to and usable by the individuals, groups or processes that need to use it.

• Confidentiality

• Integrity

• Availability

Organisations should ensure that their information systems and associated hardware and software, work as intended.

• Confidentiality

• Integrity

• Availability

If data is not easily accessible users may decide to make their own copies. This is a security risk, as the more copies of data there are, the harder the data is to protect.

• Confidentiality

• Integrity

• Availability

Organisations should have a culture of checking and reporting when data is an accurate. EG. A teacher contacting a parent to find that the telephone number is out of use, should inform the schools data manager.

• Confidentiality

• Integrity

• Availability

Organisations should have a planned pattern of data maintenance where they check the data. Possibly by sending a contact their information and asking them to confirm if it is correct.

• Confidentiality

• Integrity

• Availability

Inaccurate data can lead to conclusions based on false information or time being wasted and phone calls to numbers that no longer exist.

• Confidentiality

• Integrity

• Availability

Restricting access to a computer network that holds data

• Confidentiality

• Integrity

• Availability