Data Security Process

Data Security Process

1. user level access

   • affords the least amount of authority and permissions regarding an organization's network.
     • examples
       • administrative user access level
         • they have access to all of their creation and can modify all aspects
       • protected item access level
         • modify permissions are not allowed but user can do all other perations
       • registered user access level
         • modify permission is specified. Can modify selected aspects

2. back up and disaster recovery

   • the area of security planning that deals with protecting an organisation from the effects of significant negative events.
     • examples
       • testing and maintenance
       • assebmle plan
       • restore technology functionality
       • data and back up location
       • designated disaster recovery team

3. encryption

   • the process of converting information or data into a code, especially to prevent unauthorized access.
     • example
       • communication links
       • sing SSL (Secure Sockets Layer)
       • messages between website and browser
       • encryption types
         • DES
         • AES
         • RSA

4. CIA Triad

   • a security model that highlights core data security objectives and serves as a guide for organizations to keep their sensitive data protected from unauthorized access and data exfiltration
     • examples
       • integrity
         • prevents modification of information by unauthorised users and preserving internal and external consistency
         • hashing or baseline methods used
       • availability
         • ensures that a system’s authorized users have timely and uninterrupted access to the information in the system and to the network
         • distributive allocation, high availability and redundancy
       • confidentiality
         • concerned with preventing unauthorized access to sensitive information
         • stopping an intruder from reading confidential information