Data Protection and Privacy Flashcards

What does the "CIA Triad" in information security stand for?

Answer: Confidentiality, Integrity, Availability

The "CIA Triad" is a foundational model in information security that defines the three core principles for securing information systems. Confidentiality ensures data is accessible only to authorized users, Integrity guarantees data accuracy and completeness, and Availability ensures authorized users can access information when needed. These three principles guide the development of secure systems and practices.

Which of the following is an example of protecting data confidentiality?

Answer: Encrypting sensitive files

Encrypting sensitive files is a primary method for protecting data confidentiality. Encryption transforms data into an unreadable format, making it inaccessible to unauthorized individuals even if they gain access to the files. Only those with the correct decryption key can revert the data to its original, readable form, thus safeguarding its privacy.

What is the primary purpose of a privacy policy in an organization?

Answer: To inform individuals about how their personal data is collected, used, and protected

A privacy policy is a legal document that transparently outlines an organization's practices regarding the collection, use, storage, and sharing of personal information. Its main purpose is to inform individuals about their data rights and how their data will be handled, ensuring compliance with data protection laws and building trust with users. It empowers individuals to make informed decisions about sharing their personal data.

Which of the following scenarios is a violation of data privacy principles?

Answer: Sharing customer data with a third party without their consent

Sharing customer data with a third party without explicit consent is a direct violation of data privacy principles. Privacy regulations mandate that individuals have control over their personal information, and organizations must obtain permission before disclosing it to external entities. This action breaches trust and can lead to legal penalties and reputational damage.

What is the best approach to ensure data availability in case of hardware failure?

Answer: Implementing data backups and redundancy systems

To ensure data availability in the event of hardware failure, the best approach is to implement robust data backups and redundancy systems. Backups create copies of data that can be restored, while redundancy systems (like RAID or mirrored servers) ensure that if one component fails, another immediately takes over, preventing service interruption and data loss. This minimizes downtime and maintains continuous access to critical information.