Summary
The important aspects of security revolve around three concepts: confidentiality, integrity, and availability. In this chapter, we learned that confidentiality allows users to protect data from being disclosed, integrity assures users that data has not been altered, and availability provides access to users when requested.
Authenticity ensures that the object originates from the source that is assigned to the file or data. Nonrepudiation ensures that messages are from the assigned sender, making them unable to deny sending the message.
A strong security governance principle uses multiple layers of protection, or defense in depth, because it provides the organization with a security backup if another control is defeated or fails.
Additionally, you learned about the importance of staff members following organizational policies. Failure to do so could result in data loss and human injury. Policies are defined by C-level executives and are created based on security governance...
