CIA at the Organization Level

Study Notes

Risk assessment is the process of evaluating security-related risks to an organization's computers and networks from both internal and external threats.
A disaster recovery plan is a documented process for recovering an organization's business information system assets, including hardware, software, data, networks, and facilities in the event of a disaster.
A security policy defines an organization's security requirements, as well as the controls and sanctions needed to meet those requirements.
A good security policy outlines responsibilities and expected behavior of organization members.
A security audit evaluates whether an organization has a well-considered security policy in place and if it is being followed.

An organization must authenticate users attempting to access its network using various methods, including:
- Username and password
- Smart card and a PIN
- Fingerprint
- Voice pattern sample
- Retina scan
Multifactor authentication schemes include:
- Biometrics
- One-time passwords
- Hardware tokens that plug into a USB port and generate a password

A firewall is a software and/or hardware system that protects an organization's internal network from the Internet.
A router is a networking device that connects multiple networks and transmits data packets between them.

Encryption is the process of scrambling messages or data to make it unreadable by unauthorized parties.
An encryption key is a value used to produce encrypted text that can only be read by those with the key.
There are two types of encryption algorithms: symmetric and asymmetric.

Transport Layer Security (TLS) is a communications protocol that ensures privacy between applications and users on the Internet.

A proxy acts as an intermediary between a web browser and another server on the Internet.
A Virtual Private Network (VPN) enables remote users to securely access an organization's computing resources by transmitting and receiving encrypted data over public networks, such as the Internet.