Information Security
by ABHIJEET KATIYAR July 25, 2020 · CS
Information Security
Information security is the protection of information and systems from unauthorized access, disclosure, modification, destruction, or disruption.
The three objectives of information security are:
- Confidentiality
- Integrity
- Availability
Confidentiality
Confidentiality refers to the protection of information from unauthorized access or disclosure. Ensuring confidentiality is ensuring that those who are authorized to access information are able to do so and those who are not authorized are prevented from doing so.
Integrity
Integrity refers to the protection of information from unauthorized modification or destruction. Ensuring integrity is ensuring that information and information systems are accurate, complete and uncorrupted.
Availability
Availability refers to the protection of information and information systems from unauthorized disruption. Ensuring availability is ensuring timely and reliable access to and use of information and information systems.
Your role in information security
Three primary roles have been defined in the context of information security:
- Data Steward
- Data Custodian
- User
A user is any employee, contractor or third-party affiliate of Carnegie Mellon who is authorized to access institutional data or information systems.
Users are responsible for:
Adhering to information security policies, guidelines and procedures.
Reporting suspected vulnerabilities, breaches and/or misuse of institutional data to a manager, IT support staff or the Information Security Office.
Users:
- Avoid Risky Behaviour
- Report suspected security breaches
- Safeguard electronic communications
- Safeguard institutional data
Safeguarding Institutional Data
Know your data
Be mindful of what type of data you handle:
- Public
- Private
- Restricted
Examples of Restricted data include account passwords, driver’s license numbers, education records of students, financial account information, health information and social security numbers.
Protecting Electronic Data
- Avoid storing Restricted data on mobile computing devices
- Don’t store institutional data on personally owned computing devices
- Don’t store Restricted data on CDs, DVDs, USB thumb drives, etc.
- Don’t transmit Restricted data via email and other insecure messaging solutions
- Don’t use personal email for business communications
- Use strong passwords or passphrases
- Secure your computing devices
Safeguard Your Password
- Use a strong password or passphrase
- Change your password periodically
- Avoid using the same password for multiple accounts
- Don’t write your password down or store it in an insecure manner
- Don’t share your password with anyone for any reason
- Don’t use automatic login functionality
Secure your Computer
- Update and patch your operating system
- Enable automatic software updates where available
- Update and patch software applications (e.g. browsers, email clients, JAVA, etc.)
- Install and update antivirus software
- Install and configure firewall software
- Do not automatically connect to public wireless networks
- Disconnect your computer from the wireless network when it is not in use
- Use caution when enabling browser pop-ups
- Use caution when downloading and installing software
- Lock your computer when it is unattended
Protecting Physical Data
- Close and lock your door when leaving your office unattended
- Lock file cabinets that store institutional data
- Don’t leave Restricted data in plain view at your desk or on a whiteboard
- Don’t leave Restricted data sitting on a printer, copier, fax machine or other
- peripheral device
Protecting Verbal Communication
- Be mindful of your surroundings when discussing Restricted data
- Don’t discuss Restricted data with individuals who do not have a need to know
Disposing of Data
- Dispose of data when it is no longer needed for business purposes
- Use Identity Finder to securely delete files that contain Restricted data
- Use the Computer Recycling Program to dispose of electronic media
- Use a cross shredder to dispose of paper-based and written media
Safeguarding Electronic Communications
Electronic communications can be in the form of email, instant messaging, text messaging, social network, etc.
- Avoid opening attachments from an untrusted source
- Avoid clicking on links in electronic communications from an untrusted source
- Be wary of phishing scams
- Avoid sending Restricted data through email and other electronic communications
Avoid Risky Behaviour Online
- Be cautious when using file-sharing applications
- Be cautious when browsing the web
- Be cautious when clicking on shortened URLs
- Avoid responding to questions or clicking on links in pop-up windows
Right Understanding
Right Understanding We all know that the Human Desire is to be in continuous happiness which is the need of I (self). But do you know, from where Continuous happiness will come? No, right! So continuous happiness is to be in Right Understanding, Right Feeling, and Right Thought that is Activity of I (Self). Do…
Where We Are
Where We Are (Self-Evolution) We exist as human being. We want to live a fulfilling life. We have some desires and we have some programs for the fulfilment of it. We need to understand our basic aspiration and program for its fulfillment correctly and comprehensively. Only then, we can ensure fulfillment. We should explore ourselves…
Highway Construction
Highway Construction Embankment Construction Materials and General Requirements The materials used in embankments, subgrades, earthen, shoulders, and miscellaneous backfills shall be soil, moorum, gravel, a mixture of these. Clay having liquid limit exceeding 70 and plasticity index exceeding 45; shall be considered unsuitable for embankment. Sub-grade and top 500mm portion of the embankment just below…
Special Concretes
Special Concretes Concrete is most vital material in modern construction. In addition to normal concrete, other varieties in use are, high strength and high-performance concrete, self-compacting, lightweight, high density, fiber reinforced, polymer, colored concrete, etc. The making of concrete is an art as well as a science. Special types of concrete are those with out-of-the-ordinary…
Marketing Practices
Marketing Practices Success in the world of business, no matter how you earn it, you have to rule on the marketplace. Although luck plays a role in the outcome of the market strategies. In the business decisions, there should be the understanding of market otherwise the failure will take place by the marked decisions. While…
Risk Analysis
Risk Analysis The risk that remains after the implementation of controls is called the residual risk. All systems will have residual risk because it is virtually impossible to completely eliminate risk to an IT system. In other words, we can say that there are two main parts of the security risk analysis known as Quantitative…
Recent Comments