Question

5. In order for an organization benefit from the immeasurable advantage that it can get from integrating technology into its business processes, security challenge must be properly arrested. In connection to this, in a company who is selling manufacturing goods, it was reported that amount of goods ordered by Company X has been disclosed for Company Y irresponsibly. The Director of the production department found that the amount ordered to produce Item A has been changed using the implemented system by upsetting the normal business process. On top of these, while employees who are working in different capacities within the production department are trying to get access to the system, as major components of the system are properly functioning (for reasons such as virus, malware, etc.) they did not succeeded. Based on the above narrations, briefly explain confidentiality, integrity and availability (CIA) of information security. By considering the above narrations, what are the possible remedial solutions that you will recommend?

Answer 1

Answer:

cdscvxkkkkhcddhnnkiyfbj

Answer 2

1. Ans: Confidentiality means that data, objects, and resources are protected from unauthorized viewing and other access.

Integrity means that data is protected from unauthorized changes to ensure that it is reliable and correct.

Availability means that authorized users have access to the systems and the resources they need.

2. Ans: The three letters in the "CIA triad" stand for confidentiality, integrity, and availability. The CIA triad is a common, respected model that forms the basis for the development of security systems and policies.

from the above statement, we can say that The CIA is used for the development of security systems and policies. So, for security reasons, we can not give access to the system to the production department.

Following remedial solutions I will recommend:

• Data should be handled based on the organization's required privacy.  

• Data should be encrypted using 2FA. 

• Keep access control lists and other file permissions up to date.