1 Foundations of Information Security Free Online FlashCards

What does information security protect against?

Information security protects information and the systems that store, process, and transmit it from unauthorized access, disclosure, modification, disruption, or destruction.

What are the three goals of the CIA triad?

Confidentiality, integrity, and availability—the three goals known as the CIA triad.

What counts as an information security asset?

An asset is something of value that a person or organization owns, uses, or depends on. It may be tangible, like a computer, or intangible, like data or reputation.

What is a threat?

A threat is a circumstance or event with the potential to harm an asset, system, or organization, such as an attempted theft, fire, or power failure.

What is a vulnerability?

A vulnerability is a weakness in a system, its design, procedures, or controls that a threat could exploit or trigger.

What two considerations shape information security risk?

Risk is the possibility of harm, considered in terms of both its potential impact and its likelihood.

How do threats, vulnerabilities, assets, and risk connect?

A threat may exploit a vulnerability and cause harm to an asset. The resulting risk depends on the likelihood and seriousness of the consequences.

Is information security risk always calculated with one formula?

Risk is assessed in context; information security does not use one universal formula for every situation.

What does confidentiality protect?

Confidentiality preserves authorized restrictions on access to and disclosure of information, so only permitted people or systems can see it.

What does integrity protect?

Integrity guards against improper modification or destruction and protects the accuracy and completeness of information.

What does availability ensure?

Availability ensures that authorized users can access and use information and systems when needed.

Which CIA goal is served by restricting access to student records?

Limiting access to student records so unauthorized people cannot view them is an example of protecting confidentiality.