Information Security Handbook

Publicly available information

• Includes information that you would generally include on your web page or social media
• The CIA triad:
  • Confidentiality: Would typically be low as the general public would need to access it without authentication
  • Integrity: Would be moderate or high based on your organization's policies, as you would not want the information on your public web page replaced by an attacker
  • Availability: Would depend on organizational policy:
    • An e-commerce site would be high for availability
    • A blog may be designated as low or moderate dependent on the criticality to the organization