Question Individual Homework
- For each of the following assets, assign a low, moderate, or high impact level for the loss of confidentiality, availability, and integrity, respectively. Justify your answers. If you make any assumption, state it explicitly. NOTE: I expect 3 scores (CIA) for each case below.
An organization managing public information on its web server.A university maintaining student records which includes personal as well as grade information.Flight control systems; see the following article for potential threats:Using examples of recent security incidents (one for each kind mentioned below), explain the following types of threats:Disclosure,Disruption.
Do you think the incidents above were easily preventable?
- In the context of IT security, what is the difference between features (i.e., technological mechanisms) and assurance?