CISSP Note (Domain 1: Access Control): C.I.A. – Quick Definitions

November 16, 2009 · Posted in Information Security 

Information Security has three key focus ensuring the Confidentiality, Integrity and Availability of information, commonly known as C.I.A. Below are their definitions.

Confidentiality – ensure that information is not disclosed to unauthorized person

Integrity

  • Prevention of modification by unauthorized users
  • Prevention of unauthorized changes by otherwise authorized users
  • Internal and external consistency
    • Internal consistency within the system (i.e. within a database the sum of subtotals is equal to the sum of all units)
    • External consistency – database with the real world (i.e. database total is equal to the actual inventory in the warehouse)

Availability – ability of authorized personnel to access information on time and as necessary

Planning to take the CISSP Exam?

Get a copy of my personal notes (300plus pages worth) that I used to pass the exam for only $25.00.

Click the Add To Cart Button to Purchase

Click the Add To Cart Button to Purchase

Plus you will also get copies of notes from other CISSPs.

Learn more about this package by visiting this blog entry: CISSP REVIEW NOTES I USED TO PASS THE EXAM.

CLICK BELOW TO MAKE YOUR PURCHASE NOW.

All Purchases are securely processed through Paypal.

IMPORTANT NOTICE:

I MANUALLY REVIEW ALL ORDERS. SO ONCE YOU PURCHASE THE PRODUCT, THERE WILL BE SOME DELAY ON YOU RECIEVING AN E-MAIL FROM ME WITH THE LINK TO THE DOWNLOAD AREA OF THE PRODUCT. YOU WILL GET A RESPONSE FROM ME WITHIN 24-48 HOURS.

Bookmark and Share

Business & Tech News Update

Intel to Unveil Graphics Chip

The world's largest computer chipmaker plans to show off its first design that builds graphics into the processor, stepping up a rivalry with AMD and Nvidia

Facebook Strengthens Zynga Ties

Zynga will use Facebook Credits exclusively on most of its Facebook games, widening the influence of the social network's online payment service, a PayPal alternative

Workers of the World, Innovate

Pitney Bowes, AT&T, and Electronic Arts are among the companies using software to tap workers' collective intelligence to solve problems, reduce costs, and find new markets

Tags: , , , , , ,

Comments

Leave a Reply




  • Your Shopping Cart

    Your cart is empty

  • Calendar

    November 2009
    M T W T F S S
    « Oct   Dec »
     1
    2345678
    9101112131415
    16171819202122
    23242526272829
    3031  

  • RSS e-Business News from eCommerceTimes

    • Ruling Tosses Location Privacy Issues Deeper Into the Gray
      A federal appeals court has ruled that prosecutors may need to get warrants to access cellphone location data. The decision by the 3rd U.S. Circuit Court of Appeals struck down the Justice Department's argument that the Stored Communications Act requires judges to issue orders for access to such data whenever prosecutors show that it would be material a […]
    • AAPL May Yield a Bumper Crop This Fall
      Though it may be some time before AAPL shares again reach the record-setting heights they saw last June, they appear to have made modest gains over the last week. Shares closed Tuesday at US$257.81, down 96 cents for the day but up about $10 since Sept. 1. Meanwhile, Sony has demoed a prototype Google TV at the IFA 2010 consumer electronics show in Berlin. […]
    • US Law Against Online Gambling Makes It the Biggest Loser
      In 2006, the U.S. enacted the Unlawful Internet Gambling Enforcement Act, which outlawed Internet gambling and restricted how financial institutions could pay monies to Internet gambling sites. The UIGEA resulted from four major policy concerns of the federal government. […]
    • Counting Your Negatives
      Back in August I wrote about some research I had gotten into mostly for fun. You might recall it. I searched on a company name and the word "sucks" and reported what I found. The point of the research was not to be salacious or to offend anyone. In political circles, it's known as discovering one's "negatives" -- here's […]
    • Sparks Already Flying as Oracle Brings Hurd Into Fold
      Mark Hurd, the former CEO of HP who resigned in disgrace last month, has joined Oracle as co-president. At the same time, Charles Phillips, co-president and a member of Oracle's board of directors, has resigned. Hurd will serve alongside Co-President Safra Catz. Wall Street investors are excited about the move: Oracle's shares were up by 5 percent […]
    • VMworld: 7 Years Without a Glitch
      First a caveat: As part of my work, I attend a lot of IT vendor conferences and high-tech trade shows. Objectively speaking, most shows provide the means to literally and figuratively peek under the hood of usually interesting, sometimes intriguing vendor products and solutions. But conferences also provide an ideal opportunity to consider how much buzz a gi […]
    • Teaching Sales and Web Strategies to Sing in Harmony
      Consider the left hand of sales methodology and the right hand of digital strategy. It's 2010 and the two hands still do not know what the other is up to. Even with the most advanced of our clients, the digital strategy is focused on lead generation, awareness and a bevy of other activities aimed at the top portion of the sales funnel, traditionally own […]
    • Building a Cloud Businesses Will Actually Want to Use
      We've assembled a panel to examine the business impact of cloud computing, to explore practical implementations of cloud models, and to move beyond the hype and into gaining business paybacks from successful cloud adoption. Coming to you from The Open Group Conference in Boston, the panel tackles such issues as what stands in the way of cloud use, safe […]
    • HP's Wallet-Busting Win
      The insane tug-of-war between Dell and HP for enterprise storage company 3Par has finally drawn to a close. We have a winner, if you want to call it that -- the final sale price is more than double the figure Dell initially put forward when it announced its intentions to buy 3Par a couple weeks ago, so who knows how much of that is real value and how much is […]
    • Making Change Happen Every Day: Q&A With GSA's David McClure
      The U.S. government spends $80 billion annually on information technology. The U.S. General Services Administration is directly involved in nearly 25 percent of federal IT procurement activities through its Schedule 70 acquisition program, including nearly $9 billion directly for information technology investments. GSA has emerged as a leader in guiding fede […]

  • RSS From the National Vulnerability Database

    • CVE-2009-4997 (power_manager) September 6, 2010
      gnome-power-manager 2.27.92 does not properly implement the lock_on_suspend and lock_on_hibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a related issue to CVE-2010-2532. NOTE: this issue exists because […]
      nvd@nist.gov
    • CVE-2010-3254 (chrome) September 6, 2010
      The WebSockets implementation in Google Chrome before 6.0.472.53 does not properly handle integer values, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. […]
      nvd@nist.gov
    • CVE-2010-3244 (transact_suite) September 6, 2010
      BbtsConnection_Edit.exe in Blackboard Transact Suite (formerly Blackboard Commerce Suite) before 3.6.0.2 relies on field names when determining whether it is appropriate to decrypt a connection.xml field value, which allows local users to discover the database password via a modified connection.xml file that contains an encrypted password in the field. […]
      nvd@nist.gov
    • CVE-2010-3253 (chrome) September 6, 2010
      The implementation of notification permissions in Google Chrome before 6.0.472.53 allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. […]
      nvd@nist.gov
    • CVE-2010-2521 (kernel) September 6, 2010
      Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel before 2.6.34-rc6 allow remote attackers to cause a denial of service (panic) or possibly execute arbitrary code via a crafted NFSv4 compound WRITE request, related to the read_buf and nfsd4_decode_compound functions. […]
      nvd@nist.gov
    • CVE-2010-3252 (chrome) September 6, 2010
      Use-after-free vulnerability in the Notifications presenter in Google Chrome before 6.0.472.53 allows attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. […]
      nvd@nist.gov
    • CVE-2010-3255 (chrome) September 6, 2010
      Google Chrome before 6.0.472.53 does not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. […]
      nvd@nist.gov
    • CVE-2010-3251 (chrome) September 6, 2010
      The WebSockets implementation in Google Chrome before 6.0.472.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors. […]
      nvd@nist.gov
    • CVE-2006-7240 (power_manager) September 6, 2010
      gnome-power-manager 2.14.0 does not properly implement the lock_on_suspend and lock_on_hibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a related issue to CVE-2010-2532. […]
      nvd@nist.gov
    • CVE-2010-3250 (chrome) September 6, 2010
      Unspecified vulnerability in Google Chrome before 6.0.472.53 allows remote attackers to enumerate the set of installed extensions via unknown vectors. […]
      nvd@nist.gov
Get Adobe Flash playerPlugin by wpburn.com wordpress themes
My Highlights powered by RoohIt (for WordPress)