Information security - ANSWER protecting data and info from unlawful:
access
corruption
destruction
disruption
disclosure
modification
Information system security - ANSWER protecting systems that hold and process
critical data
CIA triad - ANSWER confidentiality, integrity, availability
Confidentiality - ANSWER ensure that information is only accessible to those with the
appropriate authorization
Integrity - ANSWER ensures that data remains accurate and unaltered unless
modification is required (ie. checksums)
Availability - ANSWER ensures that information and resources are accessible and
functional when needed by authorized users
Non-repudiation - ANSWER guaranteeing that a specific action or event has taken
place and cannot be denied by the parties involved
1
, Triple A's of Security - ANSWER authentication, authorization, accounting
Authentication - ANSWER process of verifying the identity of a user or system
Authorization - ANSWER defines what acts or resources a user can access
Accounting - ANSWER tracking user activities and resource usage
Security controls - ANSWER measures or mechanisms put in place to mitigate risks
and protect the CIA of information systems and data
Control plane - ANSWER part of a network that carries signaling traffic and is
responsible for network routing
Data plane - ANSWER part of a network that carries user traffic
Threat - ANSWER anything that could cause harm, loss, damage, or compromise to
information technology systems
External threat sources - ANSWER cyber attacks that originate from outside an
organization's network
Vulnerability - ANSWER any weakness in the system design or implementation
Internal vulnerability sources - ANSWER software bugs, misconfigured software,
improperly protected network devices, missing security patches, lack of physical security...
2
access
corruption
destruction
disruption
disclosure
modification
Information system security - ANSWER protecting systems that hold and process
critical data
CIA triad - ANSWER confidentiality, integrity, availability
Confidentiality - ANSWER ensure that information is only accessible to those with the
appropriate authorization
Integrity - ANSWER ensures that data remains accurate and unaltered unless
modification is required (ie. checksums)
Availability - ANSWER ensures that information and resources are accessible and
functional when needed by authorized users
Non-repudiation - ANSWER guaranteeing that a specific action or event has taken
place and cannot be denied by the parties involved
1
, Triple A's of Security - ANSWER authentication, authorization, accounting
Authentication - ANSWER process of verifying the identity of a user or system
Authorization - ANSWER defines what acts or resources a user can access
Accounting - ANSWER tracking user activities and resource usage
Security controls - ANSWER measures or mechanisms put in place to mitigate risks
and protect the CIA of information systems and data
Control plane - ANSWER part of a network that carries signaling traffic and is
responsible for network routing
Data plane - ANSWER part of a network that carries user traffic
Threat - ANSWER anything that could cause harm, loss, damage, or compromise to
information technology systems
External threat sources - ANSWER cyber attacks that originate from outside an
organization's network
Vulnerability - ANSWER any weakness in the system design or implementation
Internal vulnerability sources - ANSWER software bugs, misconfigured software,
improperly protected network devices, missing security patches, lack of physical security...
2
