Highlighted text? Practice this concept. Highlighted passages and figures open related questions.

Practice related questions (36)Progress & bookmarks

Current section

1 Overview of Information Security

p. 352

Practice this section 36 linked exam questions with default filters

Progress

Not marked complete

1 Overview of Information Security

Information systems and the Internet are becoming part of the infrastructure of modern society. As dependence upon IT increases, so does the importance of information security. Since measures implemented in information security are broadly divided into technological measures and management measures, this section discusses information security overall in terms of both technology and management.

1 - 1 Concept of Information Security

ISO/IEC 27000:2014 (JIS Q 27000:2014) describes information security as “preservation of confidentiality, integrity, and availability of information; in addition, other properties such as, authenticity, accountability, non-repudiation, and reliability can also be involved.”

Original Security textbook callout or table, preserving the original labels, values, symbols and spatial arrangement. Source text: The property that information is not made available or Confidentiality disclosed to unauthorized individuals, entities, or processes The property of safeguarding the accuracy and completeness of Integrity assets The property of being accessible and usable upon demand by an Availability authorized entity Authenticity The property that an entity is what it claims to be The property that ensures that the actions of an entity may be Accountability traced uniquely to the entity The property of proving that an action or event has taken place, Non-repudiation so that this event or action cannot be repudiated later Reliability The property of consistent intended behavior and results — p. 352 · Enlarge

Information integrity and website defacement · 1 practice questions Availability definition · 4 practice questions

In information security, the following three objects to be managed and four management functions are given attention to maintain the confidentiality, integrity, and availability of information.

[Objects to be managed in information security]

Original Security textbook callout or table, preserving the original labels, values, symbols and spatial arrangement. Source text: Asset Anything that has value to the organization A potential cause of an unwanted incident, which may result in Threat harm to a system or organization — p. 352 · Enlarge

p. 353

Original Security textbook callout or table, preserving the original labels, values, symbols and spatial arrangement. Source text: A weakness of an asset or group of assets that can be exploited Vulnerability by one or more threats — p. 353 · Enlarge

[Management functions of information security]

Original Security textbook callout or table, preserving the original labels, values, symbols and spatial arrangement. Source text: Prevention functions Functions to prevent the occurrence of threats Detection functions Functions to discover and detect threats that have occurred Minimization Functions to minimize the damage from a threat that has functions occurred and to prevent its expansion Functions for prompt restoration from damage caused by Restoration functions threats — p. 353 · Enlarge

In addition, the OECD (Organization for Economic Cooperation and Development) recommends the following nine principles for participants (information system owners, providers, and users) in its “Guidelines for the Security of Information Systems and Networks.”