|
|
Home
:
Security Solutions
:
CAIN Components
|
|
|
|
It is important to understand the dynamics of secure information. What is the litmus test for information security readiness? Information security and your subsequent security plans must be closely tied to the CAIN paradigm. CAIN is a principle that assists us in the evaluation of your security posture.
Confidentiality reflects the necessity to keep information private. We must understand the privacy requirements of the information’s owner and reflect them in information security controls. Information confidentiality controls can be implemented through the use of encryption, file access controls, and public key cryptography.
Authenticity is the ability to determine if the information you receive or use is the original information as it was intended to be presented. Information becomes suspect when, for example, spoofed e-mail – the process of replacing the true identity of the sender with a fake one – occurs. This deception misleads the user and can result in a serious crisis.
Integrity is the property of the information being complete and uncorrupted. Integrity is closely related to authenticity. Authenticity fraud is the deliberate intent to deceive. Integrity problems are focused more on the usability of the information based on consistency in the original bit pattern with respect to time. Viruses, worms, and other malware can create integrity issues with data.
Nonrepudiation concerns the undisclosed ownership of information, or the undisputed initiator of an information transaction. Therefore, the information’s originator should be able to prove ownership without question, and not deny ownership for the sake of convenience.
Understanding and embracing these principles helps us understand why we take certain particular actions while developing your security plans.
|
|
|
|
|
