Triad
The CIA acronym
What is Confidentiality, Integrity, and Availability
operates on the principle of "trust no one, verify everything
What is Zero Trust?
is a unique, randomly generated value created for each individual password and added to it before hashing.
What is salting?
HIPPAA
What is Health Insurance Portability and Accountability Act ?
This principle of the CIA Triad ensures that information is protected from unauthorized access.
What is confidentiality?
Always authenticate and authorize based on all available signals, not just a single factor like a password or network location
What is verify explicitly?
uses an algorithm to convert any input into a fixed-length string of characters
What is hashing?
the process of identifying, assessing, and responding to threats or events that can negatively impact organizational objectives or customer trust.
What is risk?
This principle of the CIA Triad guarantees that authorized users have reliable and timely access to data.
What is availability?
Grant users and systems only the minimum access they need to do their job, for only as long as they need it.
What is privileged access?
verify both the authenticity and integrity of data
What are digital signatures?
is the system of rules, practices, and processes an organization uses to direct and control its activities.
What is governance?
This principle of the CIA Triad involves protecting data from unauthorized modifications.
What is integrity?
The _ pillars don't operate in isolation
What is seven?
uses the same key to both encrypt and decrypt data
What is a symmetric encryption?
Evaluate each risk based on its potential impact and the likelihood of it occurring.
What is Assess?
This principle can be compromised during a Distributed Denial-of-Service (DDoS) attack, affecting the availability of systems and networks.
What is availability?
This AAA component controls what actions a user can perform on a system, such as read, write, or execute permissions.
What is authorization?
_ is the process of making data unreadable and unusable to unauthorized viewers.
Who is Encryption?
to adherence to the laws, regulations, standards, and policies that apply to an organization based on its industry, geography, and the types of data it handles.
What is compliance?