Basic Concepts - Revision history

Admin at 19:21, 6 June 2025

2025-06-06T19:21:06Z

← Older revision		Revision as of 19:21, 6 June 2025
Line 64:		Line 64:
	Indirectly, plans or information may be lost that may cost money to re-create (or information could go to a competitor that		Indirectly, plans or information may be lost that may cost money to re-create (or information could go to a competitor that

	- Reputational Risk		- '''Reputational Risk'''

	~~- Strategic Risk~~		Negative publicity about a security incident. (Can effect customers, employees, suppliers, and stakeholders opinions.)

	- ~~Operational~~ Risk		- '''Strategic Risk'''

	- Compliance Risk		An organization may become less effective in meeting its major goals and objectives as a result of the breach.

			- '''Operational Risk'''

			Risk to the organization's ability to carry out its day-to-day functions.

			- '''Compliance Risk'''

			When a security breach causes an organization to run afoul of legal or regulatory requirements.
			(Example: HIPAA compliance failures, such as losing patient files.)

			'''Note:''' Risk can be in more than one category.

Admin at 19:13, 6 June 2025

2025-06-06T19:13:10Z

← Older revision		Revision as of 19:13, 6 June 2025
Line 34:		Line 34:
	- Denial: disruption of an authorized user's legitimate access to information; violation of the principle of availability		- Denial: disruption of an authorized user's legitimate access to information; violation of the principle of availability
	(DDoS, failure of a server)		(DDoS, failure of a server)


			=== Practical Application ===

			You can use the CIA and DAD models as a starting point for a more detailed risk analysis.

			Security incidents occur when there is a breach of the confidentiality, integrity, and/or availability of information or systems.

			CIA and DAD triads can be a useful staring point.

			For example, in assessing threats to your website, you can apply the DAD triad:

			- '''Disclosure:''' Does the site contain sensitive information that would damage the company if it was disclosed at an attacker?

			- '''Alteration:''' If an attacker was able to modify information contained on the site, would that cause financial, reputational, or operational damage?

			- '''Denial:''' Does the website perform mission-critical activities that could damage the business significantly if an attacker were able to disrupt the site?


			=== Impacts of a breech ===

			A security incident can have several types of risk.

			Types of risk:

			- '''Financial Risk'''

			Monetary damage. Equipment and/or facilities may have to be repairs or replaced.
			Indirectly, plans or information may be lost that may cost money to re-create (or information could go to a competitor that

			- Reputational Risk

			- Strategic Risk

			- Operational Risk

			- Compliance Risk

Admin at 23:57, 5 June 2025

2025-06-05T23:57:36Z

@@ Line 1: / Line 1: @@
 === CIA Triad ===
-[[File:Sec_objectives.jpg]]
+[[File:Sec_objectives.jpg|600px|thumb|center]]
 The three key objectives (CIA Triad) of cybersecurity programs are confidentiality, integrity, and availability.
@@ Line 21: / Line 21: @@
 === DAD Triad ===

Admin at 23:48, 5 June 2025

2025-06-05T23:48:50Z

← Older revision		Revision as of 23:48, 5 June 2025
Line 1:		Line 1:
			=== CIA Triad ===

	[[File:Sec_objectives.jpg]]		[[File:Sec_objectives.jpg]]

	The three key objectives of cybersecurity programs are confidentiality, integrity, and availability.		The three key objectives (CIA Triad) of cybersecurity programs are confidentiality, integrity, and availability.

			- Confidentiality: Unauthorized users don't gain access.
			(Firewalls, ACL's, encryption)

			- Integrity: No unauthorized modifications.
			(Hashing, monitoring)

			- Availability: The system is up when users need it.
			(fault tolerance, clustering, backups)

			Nonrepudiation: Someone who performed an action can't deny performing said action
			(Digital Signatures)
			(Not a part of CIA, but also important.)



			=== DAD Triad ===

Admin at 23:37, 5 June 2025

2025-06-05T23:37:00Z

← Older revision		Revision as of 23:37, 5 June 2025
Line 1:		Line 1:
			[[File:Sec_objectives.jpg]]

	The three key objectives of cybersecurity programs are confidentiality, integrity, and availability.		The three key objectives of cybersecurity programs are confidentiality, integrity, and availability.

Admin: Created page with " The three key objectives of cybersecurity programs are confidentiality, integrity, and availability."

2025-06-05T23:35:37Z

Created page with " The three key objectives of cybersecurity programs are confidentiality, integrity, and availability."

New page

The three key objectives of cybersecurity programs are confidentiality, integrity, and availability.