Zusammenfassung der Ressource
Basic Security Concepts
- Terms Security Management
- Asset
- Anything of value to organization that must be protected
- Vulnerability
- A weakness of system of design that could be exploited by threat
- Threat
- A potential danger to information or Network functionality.
- Countermeasure
- A protection that mitigates potential Threat or risk
- Data Classification
- used by government and military
- Unclassified
- Data that has little or no CIA
- Sensitive but
unclassified (SBU)
- Data that could prove embarrassing if it is revealed,
but no great security breach would occur.
- Confidential
- Data must be kept secure.
- Secret
- Data for which significant effort is made to keep it
secure. Few individuals have access to this data.
- Top secret
- Data for which great effort and sometimes
considerable cost is made to guarantee its secrecy.
- used by the public sector
- Public
- Sensitive
- Private
- Confidential
- Factors when classifying data
- value of data
- cost to
- Acquire
- develop
- replace.
- Age
- data usually decreases with time.
- Useful life
- time in which data is considered
- Personal
association
- information of users and employees