model 1

Integrity

Information remains accurate and unaltered

Cybersecurity

The practice of ensuring confidentiality, integrity, and availability of information by protecting networks devices, people and data

Confidentiality

Only authorized person can access the data

Internal thread

Comes from inside like employees, former employees, vendors, or trusted person can be accidental or intentional

Threat actor

A person or a group that presents a security risk

External threat

Comes from outside the organization

Compliance

Following internal standards and external regulations

Security framework

Guidelines used to build security plans and manage risks

Security controls

Safeguards used to reduce specific security risk

Security posture

I organization’s overall ability to protect its assets and data