Security 8.1.1

• All businesses have data, which they must protect, covered by the CIA triad
• What is the CIA Triad?

  Confidentiality, integrity, and availability
• What data is protected by the CIA triad?

  sensitive data
• Whos data is held by the businesses?

  stakeholders
• The CIA triad is similar to a triangle, as if any part fails the whole structure fails
• CIA:

  Integrity is ensuring data is stored securely in a way such that it will remain reliable and accurate
• CIA:

  Availabilty is ensuring data can be accessed at any time by authorised users
• Privacy refers to the appropriate use and protection of personal information
• CIA:

  Confidentiality concerns the handling and protection of sensitive information
• Employees’ salary and benefits details are personal information.
• Employees’ salary and benefits details being shared can lead to dissatisfaction and a toxic workplace
• Client lists are guarded well as they give competitors an unfair advantage if leaked
• Trade secrets are what many organisations rely on to keep them sucessful, if they are revealed a business may fail
• Sales numbers are important as it can damage stock value and allow competitors to make better decisions
• News About Pending Restructuring, can lead to panic with employees
• Customer information is very important for companies to protect, as much can be lost such as financial, and reputation loss
• British airways was fined in 2018 for £183 million by the ICO under GDPR for a data breach that affected 500,000 customers
• Business image can be damaged significantly by data breaches