"/home/yossef/notes/Su/study_security_l1.md"

path: Su/study_security.md

- **fileName**: study_security_l1 **Created on**: 2025-03-05 22:25:43

what is security?

is the protection for assets from harm

what is security type?

• Physical security (prevent burglary and theft of property)
• Societal security (security of critical infrastructures)
• National security (political stability and national integrity)
• Safety (security of life and health)
• Environmental security (stop pollution and invasive species)
• Information security and data protection

what is information security and give an example about assets?

it's a the protection for information assets from damage or harm,
date files, software, systems

what is IS Management ?

its' consists of activiates to control and reduce the risk of damage in
information assets

what is IS Management focus on?

• evaluate threats vulnerabilities and risks
• Control Security risk and reducing vulnerabilities
• Detecting and response to attack
• recovery from demage
• Investgate and collect evidence about incidents

can we remove all vulnerabilities?

no we can't, new technology create new vulnerabilities

what is security key concpets??

• Confidentiality – student grades
• integrity – patient information
• availability – authentication service
• authenticity – admission ticket
• non-repudiation – stock sell order

what is security controls by functions type??

• preventive control: encrypted the data
• detective control: intrusion detection systems
• corrective controls: correct errors irregularities and resotre all applications
  from the last good known image

what is the three CIA security?

• confidentiality
• integrity
• Availability

what is data confidentiality?

make sure that the private or confidential information not public to any
unauthorizatied indivaiduals

what is privacy?

ensure that the indivaiduals information related to them may be collected
and store in closed way not anyone can access

what is integrity?

• data integrity: is the maintenance of, and the assurance of,
  data accuracy and consistency over its entire life-cycle
• system integrity: assure that the system do his functions in intended way
  without allowing to any unauthorizatied manipulation

what is the level of security?

• low: the loss could expected to have limited adverse effect on organzation
  operation and assets andd indivaiduals,
• moderate: the loss could expected to have serious adverse effect on organzation
  operation and assets and indivaiduals,
• high: the loss could expected to have a severe or catastrophic adverse
  effect on organzation or assets and indivaiduals

review questions

what is information security and give an example about assets?

it's a the protection for information assets from damage or harm,
date files, software, systems

what is IS Management ?

its' consists of activiates to control and reduce the risk of damage in
information assets

what is IS Management focus on?

• evaluate threats vulnerabilities and risks
• Control Security risk and reducing vulnerabilities
• Detecting and response to attack
• recovery from demage
• Investgate and collect evidence about incidents

what is security key concpets??

• Confidentiality – student grades
• integrity – patient information
• availability – authentication service
• authenticity – admission ticket
• non-repudiation – stock sell order

what is the level of security?

• low: the loss could expected to have limited adverse effect on organzation
  operation and assets andd indivaiduals,
• moderate: the loss could expected to have serious adverse effect on organzation
  operation and assets and indivaiduals,
• high: the loss could expected to have a severe or catastrophic adverse
  effect on organzation or assets and indivaiduals

continue:./study_security_l2.md
before:[[]]