Introduction to Cyber Security

The CIA Triad

• Confidentiality: Ensuring that sensitive data is protected from unauthorized access, disclosure, modification, or destruction. This principle aims to keep information secret and accessible only to authorized individuals.
• Integrity: Maintaining the accuracy and consistency of data throughout its lifecycle, preventing unauthorized modifications or deletions. Focuses on ensuring that information is trustworthy and has not been tampered with.
• Availability: Guaranteeing that data and systems are accessible to authorized users when needed. This principle ensures that resources are available when required, even during outages or attacks.

Frameworks and Standards

• COBIT (Control Objectives for Information and Related Technology): This framework primarily focuses on the governance, risk management, and compliance of information and technology across an organization. It provides a comprehensive framework for IT security.

Contingency Planning

• Recovery: The recovery process in contingency planning is focused on restoring operations to their pre-disaster state. This involves restoring damaged systems, data, and resources, getting business processes back to their normal functionality.

Data Privacy Regulations

• General Data Protection Regulation (GDPR): This EU regulation is a cornerstone of data protection in Europe. It defines strict rules for the collection, processing, and storage of personal data, granting individuals greater control over their information.

Business Strategy and Consumer Privacy

• Privacy Economics: This concept explores the economic value placed on consumer privacy. Businesses often face a trade-off between utilizing data for strategic advantage and safeguarding user privacy. It examines how privacy considerations impact business strategies and decision-making.

Explore the foundational principles of cyber security, focusing on confidentiality, integrity, and availability. This quiz covers key concepts, frameworks, and standards essential for managing security risks and compliance in various environments.