Read the definition of Information Security below and then answer the question
that follows:
Information security may be defined as that which protects the
integrity, confidentiality and availability of information through
products, people and procedures on the devices that store, manipulate
and transmit the information.
Using suitable examples, elaborate the definition by briefly describing each of the
underlined concepts to make sense of the definition as well as state a clear
example of each concept in your answer.
A. Integrity.
B. Confidentiality.
C. Availability.
D. Products.
A. Integrity refers to the trustworthiness and accuracy of information. It ensures that information remains complete, unaltered, and valid throughout its lifecycle. For example, in a financial institution, the integrity of customer account balances is crucial. Any unauthorized modification or manipulation of these balances would compromise their integrity.
B. Confidentiality refers to protecting information from unauthorized access or disclosure. It ensures that only authorized individuals or entities have access to sensitive information. For instance, when accessing medical records, healthcare providers need to maintain the confidentiality of patient information to prevent any unauthorized disclosure.
C. Availability refers to ensuring that information is accessible and usable whenever needed by authorized personnel. It involves providing resources and systems that are free from any disruptions, such as outages or technical failures, to allow continuous access to information. In an e-commerce website, availability is vital to ensure that customers can access and use the website at any time to make purchases.
D. Products in the context of information security refer to the tools, technologies, and software used to protect information. These products include firewalls, antivirus software, encryption algorithms, and intrusion detection systems. Each of these products plays a specific role in safeguarding information. For example, a firewall acts as a barrier between an internal network and the internet, filtering and blocking unauthorized access attempts.