Network Vulnerability Assessment Methodology 49
it is making business decisions is accurate? How much trust can be placed in
that information? Management is required to perform due diligence, which
means that management needs availability to accurate information. The net-
works must be available, the information contained in them must have
integrity, and all sensitive information must be kept confidential. The ISO
17799 defines these three terms in the following manner:
1. Integrity. The information is as intended without inappropriate modification
or corruption.
2. Confidentiality. The information is protected from unauthorized or acci-
dental disclosure.
3. Availability. Authorized users can access applications and systems when
required to do their jobs. ...