CIT 406

Confidentiality, Integrity, availability

CIA plus Utility, possession or control, and Authenticity

Ensures that only those with sufficient privleges may access certain information.

The quality or state of being whole, complete, and uncorrupted.

When you are able to recognize individual users

Occurs when a control provides proof that a user possesses the identity that he or she claims.

When the user has been specifically and explicitly given authority to access, update, or delete contents of an information asset.

When a control provides assurance that every activity undertaken can be attributed to a named person or automated process.

Information systems that remain useful and provide capability.

using information only for purposes known to the data owner.

People

a formal, brief, high-level statement or plan that supports an organizations strategy objectives and acceptable procedures for specified subject area. 

convey a mandatory action or rule designed to support and conform to a policy.

best practices for meeting strategy and policy requirements. 

• Strategy
• Policy
• Standards and Guidelines
• Procedures and Processes

Lists the major impacts of implementation, compliance, and enforcement.

Identifies the impacted stakeholders

identifies the dependencies for implementation of policy changes