Please enable JavaScript.
Coggle requires JavaScript to display documents.
Security Fundamentals (other guiding security principle (Least privilege…
Security Fundamentals
other guiding security principle
Least privilege
users should have minimum access and authorization to perform the task
Need to know
actually defines what the minimums for each job or business function
No Access by default
The best security approach is to start with no access and add rights based on a user’s need to know and least privilege needed to accomplish daily tasks
Defense-in-depth
A defense-in-depth strategy refers to the practice of using multiple layers of security between data and the resources on which it resides and possible attackers
Separation of Duties
Job Rotation
Mandatory Vacation
3 fundamental goal/principle
Integrity
data is protected from unauthorized modification or data corruption
ACL
Hashing
Availability
individuals who need access to data should be allowed access to that data
RAID
Redundancy
other Fault Tolerant tech
Confidentiality
prevent the disclosure of data or information to unauthorized entities
How to do that ?
Encryption
Categorizing data in different sensitive level
Access policy as per sensitive data i.e. more security policy for more sensitive data