CIA triad in cybersecurity notes

Confidentiality: What does it mean?

Confidentiality ensures that information is accessible only to those authorized to have access. - Protects sensitive data - Prevents unauthorized disclosure - Example: Passwords

Integrity vs. Availability: Key differences?

Integrity refers to maintaining the accuracy and consistency of data, while availability ensures that information is accessible when needed. - Integrity: Trustworthiness - Availability: Accessibility

True or False: Availability is more important than confidentiality.

False. While both are crucial, their importance varies by context. Each principle serves different needs.

Fill in the blank: ________ ensures data is not altered or tampered with.

Integrity ensures data is not altered or tampered with.

Confidentiality: Example in everyday life?

An example is a bank account requiring a PIN. Only account holders can access funds, ensuring confidentiality.

Availability: What does it ensure?

Availability ensures that data and services are operational and accessible when required by users.

Integrity: Why is it critical?

Integrity is critical because it ensures data is reliable and trustworthy, which is vital for decision-making.

Cause → Effect: Lack of confidentiality leads to?

Lack of confidentiality can lead to data breaches, identity theft, and loss of trust.

What does availability protect against?

Availability protects against system failures, cyberattacks, or any interruptions that make data inaccessible.

True or False: Only IT departments care about the CIA triad.

False. The CIA triad is important for all organizational levels and departments.

Integrity: How is it maintained?

Integrity is maintained through checksums, hashing, and access controls. - Checksums - Hashing - Access controls

Confidentiality: Methods to enforce?

Methods include encryption, access controls, and secure passwords to restrict unauthorized access.

What is encryption?

A method to secure data by converting it into a coded format. Only authorized users can decode it.

True or False: Firewalls are only for network security.

False. Firewalls protect both network and system security by controlling incoming and outgoing traffic.

Define multi-factor authentication.

A security process that requires two or more verification factors. Examples include passwords, smart cards, or biometrics.

List three access control models.

- Discretionary Access Control (DAC) - Mandatory Access Control (MAC) - Role-Based Access Control (RBAC)

What is the purpose of data backup?

To create copies of data to prevent loss due to damage, theft, or cyber incidents.

Fill in the blank: __________ is crucial for maintaining data integrity.

Hashing. It verifies that data has not been altered or tampered with.

Comparison: Antivirus vs Anti-malware

Antivirus focuses on known threats while anti-malware protects against a broader range of malicious software.

What is a security policy?

A set of guidelines and practices to safeguard an organization's information assets. It outlines acceptable behavior and security measures.

Cause → Effect: What happens when a system lacks proper security measures?

Increased vulnerability to data breaches, leading to potential data loss and financial damage.

Explain the principle of least privilege.

Users should have the minimum levels of access necessary to perform their job functions, reducing risk.

What is vulnerability assessment?

A systematic examination of a system or application to identify security weaknesses and recommend remediation.

True or False: Regular software updates are unnecessary for security.

False. Regular updates patch vulnerabilities and improve the security posture of systems.