Tag: management
CISSP CBK 3 – Security Management Practices
Fundamental Principles of Security
Security objectives
Confidentiality: Provides the ability to ensure that the necessary level of secrecy is enforced.
Integrity: Is upheld when the assurance of accuracy and reliability of information and system is provided and unauthorized modification of data is prevented.
Availability: Prevents disruption of service of productivity.
Definitions
Vulnerability: Is a software, hardware or procedural weakness that may provide the attacker the open door he is looking for to enter a computer or network and have unauthorized access to resources within the environment.