Data Security and Risk Management

The video tutorial introduces five categories of risks to information security, explaining the concept of risk as potential bad events. It delves into high-risk scenarios, using a risk matrix to quantify risks. The tutorial covers unauthorized access, unintended access, accidental data loss, intentional destruction, and tampering of data, highlighting the importance of protection measures and backups.

What are the two main components that usually make up a high-risk scenario?

• High likelihood and low impact

• Low likelihood and high impact

• Low likelihood and low impact

• High likelihood and high impact

What is a risk matrix used for?

• To calculate the financial cost of risks

• To give a numerical value to risks

• To eliminate all risks

• To identify the source of risks

What does unauthorized access to data typically involve?

• Accidental viewing of data

• Legal hacking with permission

• Accessing systems without permission

• Data loss due to equipment failure

What is espionage in the context of information security?

• Accidental data access

• Long-term spying to gather secrets

• Legal data monitoring

• A single hacking attempt

What can cause unintended access to data?

• Deliberate hacking

• Accidental data deletion

• Mistakes or lack of knowledge

• Intentional data tampering

What is the main difference between data access and data loss?

• Access involves viewing data, loss means data is irretrievable

• Access is intentional, loss is accidental

• Access is caused by equipment failure, loss is caused by hacking

• Access is always legal, loss is always illegal

What is an example of intentional destruction of data?

• A hard drive failing

• A virus spreading and deleting data

• Accidentally deleting a file

• A technician misconfiguring access levels

Why might an attacker intentionally destroy data?

• To back up the data

• To legally access information

• To make it harder for an organization to operate

• To accidentally stumble upon secrets

What does intentional tampering of data involve?

• Backing up data

• Accidentally losing data

• Viewing data without changing it

• Modifying data to benefit the attacker

Which principle is most affected by data tampering?

• Confidentiality

• Availability

• Integrity

• Accessibility