Lesson 01 - Group 1: Security Concepts

Confidentiality, integrity, and availability.

CIA triad

Confidentiality

Information should only be read by authorized persons.

Integrity

Data must be stored and transferred as intended, and modifications must be authorized.

Availability

Information must be accessible to authorized users when they need to view or modify it.

Non-repudiation

Ensures a person cannot deny creating or modifying data.

What five cybersecurity framework functions are shown in Lesson 1?

Identify, Protect, Detect, Respond, and Recover.

Gap analysis

Comparing actual security controls and capabilities with required controls to identify weaknesses and plan remediation.

Identity and Access Management.

IAM

Identification

Confirming a user's identity and creating an account that represents the user.

Authentication

Verifying a user's identity by comparing a supplied credential with a stored credential.

Authorization

Checking permissions to determine whether an authenticated user may perform an action.

Accounting

Recording user activity and permission usage in an audit log.

Authentication, Authorization, and Accounting.

AAA

Authentication versus authorization

Authentication verifies who the user is; authorization determines what the user is allowed to do.

Access Control List (ACL)

A permission list used to allow or deny actions on a resourc