Information Security and Privacy Principles
This is the final chapter of the CRISC syllabus, where we’ll learn about information security and privacy concepts. Information security involves protecting information from unauthorized access, use, retention, disclosure, disruption, modification, or destruction, while privacy refers to an individual’s right to control their personal information. Both are essential for maintaining trust with users.
The principles of information security include confidentiality, integrity, availability, accountability, and non-repudiation. We will learn about each of these, along with the additional concepts of encryption, hashing, digital signatures, and so on that enable achieving these principles. The principles of privacy include respecting user rights for confidentiality and giving them the option to exercise these rights.
The aim of this chapter is to understand information security and privacy principles that secure the system and...
