IAS Midterm Reviewer

Protection of the confidentiality, integrity, and availability of information assets, whether in storage, processing, or transmission, via the application of policy, education, training and awareness, and technology.

• Web Development
• Information Security
• Cybersecurity
• Data Science

The quality or state of being secure to be free from danger or harm

• insecurity
• security

• protection
• confidentiality

A model designed to guide policies for information security within an organization.

• Software Assurance

• NIST Approach

• C.A.I Triangle

• C.I.A Triangle

Ensures that only users with the rights, privileges, and need to access information are able to do so.

Whole, complete, and uncorrupted

• Integrity
• Availability

• Confidentiality

Enables authorized users—people or computer systems—to access information without interference or obstruction and to receive it in the required format.

• Availability
• Confidentiality

• Quality

• Integrity

Ensures that only users with the rights, privileges, and need to access information are able to do so.

• Confidentiality

• Integrity

• Availability

• Quality

It places the responsibility of successful information security on a single staff member or security department.

• Bottom-Up Approach

• Top-Down Approach

It is initiated by upper management who issue policy, procedures, and processes, dictate goals and expected outcomes of project.

• Top-Down Approach

• Bottom-Up Approach

A methodological approach to the development of software that seeks to build security into the development life cycle rather than address it at later stages

• Safe Development Method (SDM)
• Secure Software Development (SSD)
• Security Development Approach (SDA)
• Software Assurance (SA)