Lecture 1: Cyber Security: Introduction

what are the 5 components of an IS

1. Data

2. software

3. hardware

4. people

5. procedures

Cyber security aims to build a

defense-in-depth approach

A successful organization should have a multi-layer of security in place

• Physical security

• Personnel security

• Operations security

• Communications security

• Network security

• Data security

  • Protects Confidentiality / Integrity and Availability of information assets – storage / processing or even during transmission

The goal of CyberSecurity?

C.I.A

Confidentiality, Integrity, and Availability

C.I.A are the critical characteristics of Information, but there are other characteristics should be considered

• Confidentiality

• Integrity

• Availability

• Accuracy

• Authenticity

• Utility

• Possession

Confidentiality = Keep it secret

Only authorized people can see the information.
Examples: credit cards, personal information, health records.

Integrity = Keep it correct

Information must remain accurate, complete, and unchanged.

Availability = Keep it accessible

Authorized users can access the information when they need it

Easy memory trick: CIA

• C = Confidentiality → Secret

• I = Integrity → Correct

• A = Availability → Accessible

Accuracy = Correct information

The information has no mistakes and shows the expected value.

Authenticity = Original information

The information is genuine and has not been faked or changed.

Utility = Useful information

The information has a purpose and is in a format the user can understand.

Possession = Control of information

It means having or controlling the information, no matter its format

While a breach of confidentiality always results in a breach of ownership, a breach of ownership does not always result in a breach of confidentiality.

Confidentiality = Who can see the information

Possession/ownership = Who controls or has the information

Confidentiality breach → Ownership breach

If a hacker reads or copies your private files, they now have information they should not possess.

Example: Someone steals your credit card information and reads it.

Confidentiality is breached because they saw private information.

Possession is breached because they now have a copy.

Ownership breach → Not always confidentiality breach

Someone may take or control information without being able to read it.