Select One Of The Three Characteristics Of Information Security ( CIA )?

An employee should uphold the confidentiality of information assigned to them by the company and its customers, except when revelation of such information is authorized or required by applicable laws, rules or regulations. “Confidential information” includes all records, non-public information related to the company and its business, customers, or vendors that come to an employee in the course of carrying out the employee’s duties and that can be value to competitors or damaging to the company or its business if revealed.

Data confidentiality is one of the three main IT security components which are data confidentiality, integrity, and availability (CIA). To keep your data confidential means to protect your data from unauthorized access. In other words, sensitive data are stored in a protected system that keep these information and data away from attackers and here the data confidentiality will measure the ability of the system to protect its data.

The CIA had a big impact on America's modern intelligence. Foreign intelligence had been important to the U.S. for a long time, but during World War II, such efforts had been coordinated on a government-wide level. President Roosevelt was concerned about America’s intelligence efforts mostly about the State Department and War Department. They needed to cooperate better and adopt a more strategic view of operation. With that in mind, Roosevelt hires some people to draft a plan for a new intelligence service.

* Loss of Confidentiality – Impact of unauthorized disclosure of sensitive information (e.g., Privacy Act).

Restricting access to sensitive information plays a vital role in the success of any organization. Information is deemed sensitive when it needs protection from unauthorized access. Protecting this information is essential in safeguarding security and privacy of an organization. Thus, an organization such as Bank of America has taken measures geared towards protecting its sensitive information from unauthorized access. Just like other organizations, Bank of America has two types of sensitive information. The first type of sensitive information is personal information. This is data that may affect an individual if

The intelligence community of the United States is a large, robust and bureaucratic system. From this community though, the national objectives of the United States are supported through their gathering and analytical capabilities. The following paper will highlight the intelligence agencies of the Federal government as well as state and local agencies that make up the intelligence community. Within these entities are programs that develop intelligence for use in protecting the homeland as well as analyzing intelligence from across the broad intelligence community spectrum. Along with this information, an overview of the 9/11 Commissions report on intelligence sharing recommendations will be looked at. Finally the domestic and foreign intelligence issue will be defined and addressed. From these discussions the overall capabilities and limitations of intelligence and the intelligence community will be seen through the aspect of supporting the efforts of securing the homeland.

Please help protect confidential information - which may include, for example, trade secrets, customer lists and company financial information - by taking the following precautionary measures:

The Central Intelligence Agency (CIA) has proved its worth throughout the world. The organization was able to push past all prejudice in order to protect the people of the United States. Today it is a very respected and sought after agency that many rely on for their safety and income. The CIA is a powerful and organized bureau that has asserted its dominance and altered the face of society throughout the entire world since its beginning in 1947. The United States has since become an even more authoritative and respected country worldwide thanks to this organization.

The data collected and distributed in every organization is a very important resource; therefore, all personnel in the organization must be aware of the security threats present and the measure to take to prevent data breach or leak. Data leak can occur unintentionally or intentionally. For example, if the employee is being careless with sensitive data and leaving it in the open for others to access it this would be an unintentional data leak. An intentional leak would be when a disgruntled employee gives sensitive information to other competitors. The responsibility for database protection goes to the database administration. It’s their task to develop the procedures and policies to avert data breach. The database

This paper will analyze the different elements that compromise the intelligence communities (IC) from local law enforcement to national agencies and how each of those entities contributes to security intelligence. Secondly, this paper will evaluate the lessons learned from the attacks of 9/11. Lastly, the issues of domestic intelligence vs. foreign intelligence will be examined.

Question 3. Design an information security metrics program that would provide ChoicePoint executives with visibility into the effectiveness of the security program in preventing future data breaches. What information security metrics would you recommend and why? [20 points]

One thing is clear: cybersecurity breaches can be embarrassing; they can damage an organization’s reputation permanently. How and when to notify external partners, victims, and other parties affected by an information system breach is one of the most difficult challenges facing an organization. Often, the full scope of the damage caused cannot be ascertained immediately; it can take months in the wake of a cybersecurity event to know precisely what systems and data were compromised and/or ex-filtrated. Complicating matters is the fact that different industries have separate oversight and legal compliance issues due to the type of data they store.

As more companies have made use of technology and have been offering digital services, they have been facing the issue of data breaches which has negatively impacted their businesses. During recent years, data breaches have been high in number. Only in 2011 there were 535 breaches reported in the US, which involved 30.4 million sensitive records (Caldwell, 2012). In 2012, The New York State Electric & Gas Co. in Rochester, New York experienced a data breach involving 1.8 million files containing people’s personal information, such as social security numbers, and bank accounts. Utah Department of Technology Services also experienced an attack by hackers which exposed 780,000 patient files (Arma International, 2012). Important information

Response: Nearly every organization on the planet has a security procedure regarding privacy. But due to the overwhelming shift to digital information, this practice is more important and far more of a threat than in previous years. However, due to the capabilities of both, internal and external threats, no universal set of security procedures has been established.

Any organization is critically dependent on data to perform its functions. Security breaches resulting from malicious code attacks, denial of service, employee negligence and theft, unauthorized access, policy violations, (ROCHA, 2012) and vendor leaks and mistakes, are on the increase. There was a total of nine mega breaches in 2015 as reported by Symantec which reported an alarming 429 million exposed identities ("Cyber Security Incident Response: Shifting from Reactive to Proactive | Ayehu", 2016) .In the light of the above fact, it becomes not a question of if, but when a compromise will occur (Williams, 2015, pg.1) A security breach has disastrous impact on an organization as it leaves in its wake financial, legal and compliance and reputational risk. The health and financial services sector incur most costly data breaches because of higher fines ad above average rate of lost in business and customers (Ponemon, 2016). According to Ponemon (2016), majority of data breaches results from malicious and criminal attacks which take considerable time to detect and contain and has thus have a higher remediation cost. It is worthy to mention the Office of Personnel Management breach, where they could not put their fingers on what was taken during the breach which generates distrust among affected parties. The Sony and the OPM breach increasingly makes it clear that attackers use anti-forensic and evidence destroying