Question

What are the three components of the C.I.A. triad? What are they used for? Who is ultimately responsible for the security of information in the organization? What is the difference between vulnerability and exposure? Provide an example of how an organization was vulnerable or exposed to a security breach

Answer 1

The three components of the C.I.A triad are Availability, Confidentiality and Integrity. These are the most crucial components of information security. These are the guidelines of information security within an organization.

• Availability:- It is used for the availability of reliable access to the information by authorized person. Providing updated software and maintaining the hardware which is currently functioning in the organization. It safeguards the data loss from the interruption in connection.
• Confidentiality:- It means privacy of data. Confidentiality safeguard the important and crucial data from wrong people and make sure that right people can easily get access.
• Integrity:- It ensures that confidentiality of the data don’t break. All the data should flow with accuracy and consistency over the period of time. It also detects any changes in data that might occur as a result of server crash.

The Chief Information Security Officer (CISO) is responsible for the security of information in the organization.

The Difference between Vulnerability and exposure are as follows:

Vulnerability It means a mistake or fault in a system or data that can be a threat for an organization and can be used by a hacker to gain the access to the data or system. It allows a hacker to have the access of all the data into the system and pose as another person or entity. It is the last point of hacking.

Exposure It refers as an issue in the system or a mistake in system software that allows a hacker to gather all the information to stepping-stone into a system. It allows a hacker to hide the activity to try to gain access into the system. It is a primary point of hacking.

For Example when an employee resigns a job and manager forgets to disable his all the access to external email or account and logins and name from the Company’s credit card, this makes the business open to all the attacker internal or external both which leads to vulnerability or exposure to the organization a security breach.