Fundamentals of Cybersecurity

The CIA triad—confidentiality, integrity, and availability—forms the foundation of cybersecurity by ensuring information is protected from unauthorized access, alteration, and disruption. [1]

Data classification organizes information into categories such as sensitive, confidential, PII, and PHI, enabling organizations to apply appropriate protections and comply with regulations. [1]

Risk management enables organizations to identify, assess, and prioritize risks, ensuring that resources are focused on the most significant threats to assets and operations. [1]

Risks are prioritized based on their likelihood and potential impact, with the highest priority given to those that could cause the most harm to critical assets. [1]

Risk treatment strategies include mitigation, transfer, avoidance, and acceptance, each chosen based on cost-benefit analysis and organizational risk tolerance. [1]

Security controls are categorized as physical, technical, or administrative, and are layered in a defense-in-depth strategy to provide comprehensive protection. [1]

Defense-in-depth layers multiple security controls so that if one fails, others remain to prevent, detect, or respond to incidents, creating a resilient security posture. [1]

Cybersecurity governance ensures alignment with laws, regulations, and standards, and establishes policies and procedures that support business objectives and compliance. [1]

Regulations like GDPR and HIPAA require organizations to implement strict data protection measures and influence how personal and sensitive data is managed. [1]

A BCP outlines procedures to maintain essential business functions during and after disruptions, ensuring operational resilience and rapid recovery. [1]

A BIA assesses the potential effects of disruptions on critical operations, helping organizations prioritize recovery efforts and allocate resources effectively. [1]

A DRP includes strategies for backup and recovery, types of recovery sites, and regular testing through exercises to ensure quick restoration of critical systems after a disaster. [1]