RC10 Security

What are the types of confidential company, customer, and colleague information?

• Financial data, personal identification, and trade secrets

• Public records and marketing materials

• Social media posts and advertisements

• Weather forecasts and news articles

Why is it important to maintain confidentiality, integrity, and availability (CIA), and what are the consequences of not maintaining them?

• To ensure data security and prevent unauthorised access, data breaches, and loss of trust.

• To comply with legal regulations and avoid penalties.

• To maintain system performance and prevent downtime.

• To enhance user experience and satisfaction.

What are the technical and non-technical threats that may cause damage to an organisation?

• Technical threats include cyber attacks, while non-technical threats include natural disasters.

• Technical threats include natural disasters, while non-technical threats include cyber attacks.

• Technical threats include employee errors, while non-technical threats include software bugs.

• Technical threats include financial instability, while non-technical threats include hardware failures.

What are the technical and non-technical vulnerabilities that exist within an organisation?

• Technical vulnerabilities include software bugs, while non-technical vulnerabilities include human errors.

• Technical vulnerabilities include human errors, while non-technical vulnerabilities include software bugs.

• Technical vulnerabilities include software bugs, while non-technical vulnerabilities include hardware failures.

• Technical vulnerabilities include hardware failures, while non-technical vulnerabilities include software bugs.

What are the potential impacts of threats and vulnerabilities on an organisation?

• Loss of data and financial resources

• Improved security measures

• Increased employee productivity

• Enhanced customer satisfaction

What are the risk mitigation controls to prevent threats to digital systems?

• Implementing firewalls and antivirus software

• Ignoring software updates

• Using weak passwords

• Sharing passwords with others

Reflect on your knowledge about the process and protocols of internet security assurance.

• Internet security assurance involves protocols like SSL/TLS, firewalls, and intrusion detection systems.

• Internet security assurance is only about using strong passwords.

• Internet security assurance does not involve any protocols.

• Internet security assurance is solely the responsibility of end-users.

Reflect on your knowledge about the interrelationship of components required for an effective computer security system.

• The components are independent and do not affect each other.

• The components are interrelated and work together to ensure security.

• The components are only related to hardware aspects.

• The components are only related to software aspects.

Confidentiality is defined as:

• The assurance that information is accessible only to those authorised to have access.

• The protection of data from unauthorised modification.

• The ability to use data as needed.

• The process of encoding information.

Integrity is defined as:

• The quality of being honest and having strong moral principles

• The ability to perform tasks efficiently

• The state of being physically fit

• The capacity to learn new skills quickly