Many of the compliance requirements that we presented in earlier sections address data confidentiality. Even though ensuring availability and integrity of data is important, keeping private information confidential garners the most attention because, once the confidentiality of data has been breached, it cannot be undone. In other words, once people view confidential data, there is no way to remove that data from their memory. Careful attention must be paid to each of the three tenets of information security, as shown in FIGURE 4-3, to protect an organization’s data assets.
FIGURE 4-3 The three tenets of information ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month, and much more.
