Governance, Risk and Compliance
-
Information Assurance (IA) ensures that the integrity, availability, confidentiality and authenticity of data and systems are protected during usage, processing, storage and transmission of information. Below are the processes that help achieve IA: Developing local policies, processes and guidelines. Designing…
-
Hack Value Is something worth doing? Is the system worth hacking? Are the information worth something? Vulnerability The existence of weakness/flaw in a system, process, software, etc. When exploited, it leads to undesirable and unexpected event compromising the security of…
-
Confidentiality It is the assurance that information is accessible only to those who are authorized. Integrity Integrity refers to the trustworthiness of the data. It is the assurance that information is sufficiently accurate for its purpose, and that information cannot…
-
This post reviews several widely used frameworks and models, organized into four categories: Attack and Defense, Testing, Privacy and Compliance, and Governance and Management. For each, it provides a simple definition, notes comparable frameworks or models, and highlights the key…