General Certified in Cybersecurity (CC) links

-

General CC Links:


Confidentiality, integrity, and availability (CIA) are three fundamental pillars of cybersecurity. They serve as a foundation for designing and implementing secure systems, protecting against cyber threats and attacks, and ensuring that sensitive data and critical assets remain secure.

Confidentiality in Cybersecurity:
In the context of cybersecurity, confidentiality refers to protecting sensitive information from unauthorized disclosure or access. Sensitive information can include personal identifiable information (PII), financial data, trade secrets, intellectual property, and other proprietary information. To ensure confidentiality, cybersecurity measures such as encryption, access controls, and data loss prevention technologies are used to prevent unauthorized access, disclosure, or theft of sensitive data.

Integrity in Cybersecurity:
Integrity in cybersecurity refers to the protection of the accuracy and completeness of data. This includes ensuring that data is not tampered with or altered by unauthorized users or malicious actors, and that any changes made to data are authorized and controlled. In order to protect data integrity, cybersecurity measures such as digital signatures, access controls, and audit trails are used to ensure that data is protected from unauthorized modifications.

Availability in Cybersecurity:
Availability in cybersecurity refers to the availability and reliability of systems and services, and ensuring that authorized users have access to the resources they need when they need them. Availability can be disrupted by cyber attacks such as distributed denial of service (DDoS) attacks, ransomware attacks, and other forms of malware. To ensure availability, cybersecurity measures such as redundancy, disaster recovery planning, and backup systems are implemented to ensure that systems and services remain available and operational in the event of an outage or attack.

In summary, confidentiality, integrity, and availability are essential principles in cybersecurity. These principles guide the design and implementation of secure systems and ensure that sensitive data and critical assets remain protected from cyber threats and attacks. By adhering to these principles, organizations can improve their security posture and reduce the risk of cyber incidents.

If data integrity is most important to us, which of these would we MOST likely use?

Message Digests : 


Message digests, also known as hash functions, are a cryptographic technique used to ensure data integrity. A message digest is a fixed-length sequence of bits that is generated by applying a mathematical algorithm to a message or data file. The algorithm takes the input message or file and applies a set of mathematical operations to produce a unique fixed-length output, which is the message digest.

Message digests are commonly used to verify the integrity of data in transit or at rest. They can be used to confirm that a file or message has not been altered or tampered with during transmission or storage. This is achieved by generating a message digest of the original file or message before transmission or storage, and then generating a new message digest of the received or retrieved file or message. If the two message digests match, then it is highly likely that the data has not been tampered with.

Message digests are widely used in cybersecurity for a variety of applications, including digital signatures, password storage, and file verification. They are also used in blockchain technology to ensure the integrity of the blockchain ledger. Popular message digest algorithms include SHA-256, MD5, and SHA-3.

If data integrity is the most important consideration, then the cybersecurity measure that would be most likely used is digital signatures. Digital signatures are a form of authentication that ensure the integrity of a message, document, or data file. A digital signature is created using a mathematical algorithm that generates a unique code, which is attached to the message or file. If any changes are made to the message or file, the digital signature will be invalidated, indicating that the data has been tampered with. Digital signatures are commonly used to authenticate documents, verify the identity of the sender, and ensure the integrity of data in transit or at rest. By using digital signatures, organizations can ensure that data is protected from unauthorized modifications, which is essential for maintaining data integrity.

After an attack we have suffered a loss of public confidence, which leg of the CIA was compromised?



Confidentiality : 



Loss of public confidence can be attributed to the compromise of the confidentiality and/or availability leg of the CIA triad.

If sensitive information was disclosed to unauthorized parties as a result of the attack, the confidentiality of the information was compromised. This can result in a loss of public confidence as customers and other stakeholders may feel that their private information is not being adequately protected by the organization.

If the attack caused a disruption to services or systems, resulting in a loss of availability, this can also erode public confidence. Customers and stakeholders may lose trust in the organization's ability to provide reliable services and may seek alternatives that they perceive to be more dependable.

It's also possible that the loss of public confidence was a result of a combination of compromised confidentiality and availability. In any case, it's important for organizations to take steps to rebuild public trust after a cyber attack. This can include being transparent about the incident and its impact, taking steps to remediate vulnerabilities, and implementing additional security measures to prevent future attacks.

Comments

Post a Comment

Popular posts from this blog

What is Microsoft SharePoint ?

-
Microsoft SharePoint is a web-based collaborative platform that integrates with Microsoft Office. It's primarily used for document management and storage but also offers a wide range of capabilities such as intranet, content management, workflow management, business intelligence, and enterprise search. SharePoint allows users to create sites where they can share documents, information, and ideas within their organization. These sites can be customized to fit specific needs, such as team collaboration, project management, or departmental portals. Some key features of SharePoint include: Document Management: Users can upload, store, organize, and share documents within SharePoint sites. Version control ensures that users are always working with the latest version of a document. Collaboration: SharePoint facilitates collaboration among team members through features like document co-authoring, discussion boards, calendars, and task lists. Intranet and Portals: SharePoint can be used...
Read more

General Cybersecurity

-
What is perimeter security?  Perimeter security, in the context of cybersecurity, refers to the measures and strategies implemented to protect an organization's internal network from external threats. It establishes a boundary, or perimeter, between the organization's internal network and the external environment, such as the internet. The goal of perimeter security is to prevent unauthorized access, attacks, and breaches from reaching the internal network and its resources. Here are some key components and concepts related to perimeter security: Firewalls: Firewalls are the cornerstone of perimeter security. They inspect incoming and outgoing network traffic based on predefined rules and policies. Firewalls can block or allow traffic based on factors such as IP addresses, port numbers, and protocols. Intrusion Detection and Prevention Systems (IDPS): IDPS solutions monitor network traffic for signs of malicious activity or known attack patterns. They can detect and prevent i...
Read more

Well-Architected Framework | Solution Architect

-
The Well-Architected Framework is a set of best practices and guidelines designed to help cloud architects build secure, high-performing, resilient, and efficient infrastructure for their applications. The framework is developed by AWS (Amazon Web Services), but similar principles can be applied to other cloud platforms. The Well-Architected Framework consists of five pillars, each addressing a key aspect of building well-designed and well-operated systems. These pillars are: Operational Excellence: Focuses on operational practices that ensure efficient and effective use of cloud resources. Key considerations include monitoring, incident response, automation, and overall operational health. Security: Emphasizes the importance of implementing robust security measures to protect data, systems, and assets. Covers data protection, identity and access management, and incident response, among other security aspects. Reliability: Aims to ensure a system's ability to recover from failures ...
Read more