Information Security: The Three Pillars Of Security

Improved Essays
The Three Pillars of Security

When it comes to security of information there are three distinct levels involved in the protection of corporate information. In this paper, I will be examining each of these three levels of security, providing an example for each. The first and possibly the most noticeable is physical security, also known as enterprise security. The next level necessary in an organization is information security or managerial security. The third level of security is information technology, (IT), security. The insurance of information security in a business requires all three levels of individual security to regulate and control access to the information an organization considers valuable. Initially when thinking about
…show more content…
Information security revolves around the three pillars; confidentiality, integrity, and availability, (CIA). Confidentiality – Customers want to know that their personal information will be safe and not used without consent. A business client wants to be sure that sensitive information provided does not end up in the wrong hands. Integrity – Information should not be altered or changed by unauthorized persons. Information should be reliable, once it is manipulated then it loses its value. Availability – personal information kept about individuals or businesses should be available when requested. Also access to pertinent information should be readily available to those in management that need it (Government of Hong Kong Special Administrative Region, …show more content…
(2016, February 8). Hack brief: Hacker leaks the info of thousands of FBI and DHS employees. Wired. Retrieved from https://www.wired.com/2016/02/hack-brief-fbi-and-dhs-are-targets-in-employee-info-hack/
The Government of Hong Kong Special Administrative Region. (2016, August). What is information security. Info Sec. Retrieved from http://www.infosec.gov.hk/english/information/what_icana.html#c
The International Consortium of Investigative Journalists. (2016, April 3). Giant leak of offshore financial records eposes global array of crime and corruption. The Panama Papers. Retrieved from https://panamapapers.icij.org/20160403-panama-papers-global-overview.html
Korolov, M. (2016, April 07). Millions of child support records stolen, D.C. officials want answers. Retrieved from http://www.csoonline.com/article/3053531/security/millions-of-child-support-records-stolen-dc-officials-want-answers.html
National Center for Educational Statistics. (n.d.). Protecting your system: Physical security. Safeguarding Your Technology, chapter 5. Retrieved from https://nces.ed.gov/pubs98/safetech/chapter5.asp
Sans Institute. (2016). IT resources. Retrieved from

Related Documents

  • Improved Essays

    Nt1330 Unit 2

    • 369 Words
    • 2 Pages

    The business requirements of the access control must be established and documented. Access control rules and rights for each user or group of users should be clearly stated in a policy statement about access All employees, contractors and third party users of information systems and services should be required to record and report any allegations or findings of security weaknesses in the system or the services. This aims to ensure that information security events and weaknesses detection of information security can be dealt with in a timely and…

    • 369 Words
    • 2 Pages
    Improved Essays
  • Decent Essays

    Upon determining what should be in the intranet, what risk is the organization willing to tolerate should be tackled. An assessment of the privacy controls and security controls can be determined by using NIST Special Publication 800-53A: Assessing Security and Privacy Controls in Federal Information Systems and Organizations, Building Effective Assessment Plans as a guide along with NIST Special Publication 800-30, Rev-1, Guide for Conducting Risk Assessments (NIST SP 30-1, 800-53A). To truly understand this publication is prohibitive to fully explain; however, this step is critical and will impact your intranet dramatically. To simplify: you cannot always have the risk metric you desired because by doing so would make your system so slow and unusable you could not accomplish much.…

    • 428 Words
    • 2 Pages
    Decent Essays
  • Improved Essays

    The vulnerabilities identified in part 1 assignment was mitigated by recommending the right solutions. In part2, the network security analyst identified and proposed solutions for the right network devices to protect the accounting firm's network from intruders and external cyber threats. In this final assignment section, the network security analyst of the accounting firm will propose the application/end-user security recommendation to protect the company’s sensitive information. The analyst will also ensure that the proper procedure and policies are in place to take care of network security and employees should be trained and aware of those policies from possible threats including cyber-attacks.…

    • 730 Words
    • 3 Pages
    Improved Essays
  • Improved Essays

    Cyber Ark Case

    • 725 Words
    • 3 Pages

    Cyber Ark is an enterprise application cyber security company based in Israel with offices worldwide. The United States headquarters is in Newton, MA. with regional sales offices in Ft. Lauderdale, Houston, Las Angles and Chicago. The company is well known in the IT Security Company with a quality product designed to secure data in the enterprise as well as the cloud.…

    • 725 Words
    • 3 Pages
    Improved Essays
  • Improved Essays

    A major leak affecting the United States currently was the recent release of the names of companies, government agencies and organizations that had called D.C. Madame’s escort service between 2000 and 2006. Deborah Jeane Palfrey, also referred to as D.C. Madame, is accused by federal prosecutors of running a prostitution ring earning more than $2 million over thirteen years. Palfrey’s business began in 1993 and she contends that her escort service was legitimate.…

    • 578 Words
    • 3 Pages
    Improved Essays
  • Decent Essays

    Wyoming Medical Center, Los Angeles County, and Raymond James all share similar struggles with how to secure the network, computers and mobile devices. Control and security are a concern from both inside and outside of the facilities and organizations. Each organization deployed a multi-level/tier approach was needed to protect the data. The Novell ZenWorks agents are used to manage the operating systems and software that is installed on the desktops/workstations; it allows the information technology group to customize the software for installation and patch management.…

    • 302 Words
    • 2 Pages
    Decent Essays
  • Decent Essays

    e) Size of the message retrieved id 107 bytes. determined as follows:- Size (message) = number of characters in the message User is asked to send message of this size. Simulation has been done in CloudSim3.0. Shares of file have been constructed in datacenter and these shares have been sent to hosts (servers) available in that datacenter.…

    • 599 Words
    • 3 Pages
    Decent Essays
  • Improved Essays

    HGC Case Study

    • 1025 Words
    • 4 Pages

    The security systems will be focused on management security, operational security and technical security controls. Management Security: These are management controls that will focus on the management of the IT security system and the management of risk for interconnected systems in HBWC environment, and includes techniques and concerns usually addressed by IT management. Operational Security: The operational controls address security methods focusing on mechanisms primarily implemented and executed by people (as opposed to systems). These controls are put in place to improve the security of a particular system (or group of systems). Often, they require technical or specialized expertise and rely upon management activities as well as technical controls.…

    • 1025 Words
    • 4 Pages
    Improved Essays
  • Improved Essays

    Any organization, including ABC healthcare Information technology (IT) infrastructures are exceedingly powerless against potential assaults or harm caused from internal and external threats. Meeting standardize compliance requirements developed by the Sarbanes-Oxley (SOX) Act and the Health Insurance Portability and Accountability Act (HIPAA) is critical to reduce potentials assaults to guarantee their infrastructures are secure to the best degree possible by substituting data frameworks regulations. Technical security recommendations to improve ABC Healthcare information security can enhance their information security without significantly increasing management or cause difficulty in the organization. Healthcare industries store and have…

    • 782 Words
    • 4 Pages
    Improved Essays
  • Improved Essays

    Robert Hanssen Failure

    • 1219 Words
    • 5 Pages

    Creating and designing policies and procedures geared towards being able to document and look back on security violations that have been reported is going to be a crucial step in this process (Office of the Inspector General Oversight and Review Division, 2007). Until filing this report, there was not a concrete way of doing it. Some tools that are in use today started from this report. An example of such tools is a financial disclosure program where annually FBI employees must disclose their finance records for review. This will give the FBI the opportunity to look for any discrepancies or sudden influxes of…

    • 1219 Words
    • 5 Pages
    Improved Essays
  • Improved Essays

    These safeguards include access control, audit controls, integrity controls, and transmission security (HSS.org). Access control requires a covered entity to implement policies and procedures to restrict a certain level of individuals from obtaining technical access to the electronic information. Audit controls must be implemented including but limited to hardware, software, and procedures to examine the access of electronic information and ensure the information is…

    • 1427 Words
    • 6 Pages
    Improved Essays
  • Improved Essays

    In 1996, United States Congress passed the Health Insurance Portability and Accountability Act (HIPAA) as a way for Americans to continue with health care insurance during a job transition and reduce health care fraud and abuse (California Department of Health Care Services, 2015). Providing health care services at the administrative level, the organization is responsible for protecting the individuals served private information when working with other health care providers and those supporting the individual needs. In this analysis the origins and impact of HIPAA/Private Health Information (PHI) while serving individuals with Intellectual Developmental Disabilities will be discussed, along with Bardach’s eightfold process of HIPPA/PHI and…

    • 1101 Words
    • 5 Pages
    Improved Essays
  • Decent Essays

    V-Care Security Solutions

    • 150 Words
    • 1 Pages

    Our present day security solutions involve threat assessment, surveillance and analytics, automated access and access control systems and a number of biometric and other devices that ensure that lives are protected keeping threats out of range. Security solutions apply to intellectual property that ranges from trade secrets to highly qualified people. It involves information systems on one hand…

    • 150 Words
    • 1 Pages
    Decent Essays
  • Improved Essays

    Post 9/11 Privacy

    • 1178 Words
    • 5 Pages

    After the attacks of 9/11, nearly 263 government agencies were reorganized as well as the creation of the Department of Homeland security, which nearly doubled the intelligence budget from 2001 (Freedman, 2011). Much of the technology used in surveillance efforts is off-the-shelf and is lacking in innovation. Moreover, the technological boom in the private sector has afforded the Government many avenues in which to collect information on private citizen including social media, cell phone records, GPS information, financial records, medical information and other third-party services that are capable of storing gigabytes of information on an individual (Shamsi & Abado, 2011). This notion leads to the issues of that information’s security…

    • 1178 Words
    • 5 Pages
    Improved Essays
  • Improved Essays

    Becoming An FBI Agent

    • 680 Words
    • 3 Pages

    "Quick Facts." The Federal Bureau Of Investigation. U.S. Department of Justice, 2014. Web. 28 Sept. 2015.…

    • 680 Words
    • 3 Pages
    Improved Essays