In: Computer Science
Information security is achieved through a combination of what three entities? Provide at least one example of each entity.
Information security is achieved with the help of C I A or Confidentiality , Integrity , and Availability.
Confidentiality means that information should remain confidential and only authorized personnel should be able to see access the information. Unauthorized personnel should not be able to access the information.
e.g, Banking details of a customer who shops online must kept hidden so that unauthorized personnel are not able to access it.
Integrity means that information should be received without any modification or alteration. Integrity ensures that the data has not been tampered by some attacker.
e.g, During a banking transaction changing the amount transacted is a violation of Integrity.
Availability means that information should not be secured to an extent that nobody will be able to access it, because then this information will not be of any benefit to anyone as nobody will be able to access it. So information should be secured but must be available to authorized users.
e.g, Bank employees must able to see the details of a banking transaction if a customer has a query about the transaction.