Concepts (10) - Sunflower CISSP

Concepts (10) CIA DAD - NEGATIVE - (disclosure alteration and destruction) Confidentiality - prevent unauthorized disclosure, need to know, and least privilege. assurance that information is not disclosed to unauthorized programs, users, processes, encryption, logical and physical access control, Integrity - no unauthorized modifications, consistent data, protecting data or a resource from being altered in an unauthorized fashion Availability - reliable and timely, accessible, fault tolerance and recovery procedures, WHEN NEEDED IAAA requirements for accountability Identification - user claims identity, used for user access control Authentication - testing of evidence of users identity Accountability - determine actions to an individual person Authorization - rights and permissions granted Privacy - level of confidentiality and privacy protections Risk (12) Not possible to get rid of all risk.

Step 1 – Prepare for Assessment (purpose, scope, etc.) Step 2 – Conduct Assessment - ID threat sources and events - ID vulnerabilities and predisposing conditions - Determine likelihood of occurrence - Determine magnitude of impact - Determine risk Step 3 – Communicate Risk/results Step 4 – Maintain Assessment/regularly Types of Risk

Loading..

Tags:

  Purpose

Information

Related search queries