Principles of Cybersecurity

Important stuff to remember for rounds and matches

Goals of Information Security

Ensure only APPROVED users have access to data. Make sure that information has not been tampered with or corrupted between the source and the end user, and that the sender of the information is who it is supposed to be

People, Processes and Technology

People: Training for end users and resources to help IT professionals stay aware of emerging threats and industry trends

Processes: Policies, rules and procedures for maintaining security

Technology: Security tools and system administration

Tech Tools of the Trade

We want to maintain Confidentiality, Integrity, and Availability (CIA). In order to do this we must use different measures.

1. Encryption: Passwords, encryption keys

2. User access control: Which users have access to networks and what level of access do they have?

3. File permissions: Customizable settings that only allow certain users to view and edit specific files

4. Version control systems/backups

5. Offsite data storage/backup

6. Redundant architecture: Hardware and software

Building Strong Passwords

Use at least 3 of the following: numbers, lower case letters, upper case letters, and symbols. Experts recommend changing passwords only when there is evidence of a data breach. ALWAYS use at least 10 characters; 12-16 characters is best. Passwords should be UNIQUE to you. Do NOT use commonly known passwords. Do NOT use the same password for each account. Complex characters and/or a phrase that has significance or meaning to you makes it more secure. Writing down your password or using encrypted Password Management Systems to store your login information is optimal