Wyman 2
When looking at the following scenario I focused on the three main parts of the CIA triad, those parts being: confidentiality, integrity and availability. I personally believe that the component that would apply to this scenario the most would be availability. At the very beginning of the simulation it is known that there has been many conversations throughout the year with supervisors about the systems and their updates. These conversations also included the Transport Layer Security also known as TLS and from Secure Sockets Layer also known as SSL. The reason why I chose availability is due to the budget restraints, this alone can cause numerous issues including not having the resources available in order to add these to the network which left
the system vulnerable to attacks. Whether the company is big or small having something known as a CIRT plan is very important. This can be put in place simply by continuously having conversations with management not just about the needs of the network but also the companies data safety. Never the less it is important to always educate all members of the staff on the importance of cyber security and risk management. Some other things that is important to know is what SSL and TLS really is. Secure Sockets Layer(SSL) was something that was used more prior to 2015. The use of SSL was reduced by the
U.S. and even stopped when it came to any HIPPA data and other sensitive information. TLS was
implemented afterwards and is now the go-to when it comes to preventing the breakdown in security on many networks. TLS allows for better protocols that prevents attackers from being able to eavesdrop on what should be a secure communications network.
