Pertanyaan:
- Provide a real-world business example for a failure in Confidentiality, Integrity, and Availability?
- How might an e-commerce website prioritize one aspect of the CIA triad over the others for its product pages versus its payment processing system?
- Explain the principle of “least privilege” and how it supports confidentiality?
Keterangan: Saya telah mengerjakan tugas dengan baik dan benar
Status: 100% Tercapai
Bukti:
1. A real-world example of failure in the CIA triad can be seen in several major incidents. In the Equifax breach, confidentiality failed because sensitive personal data was exposed to unauthorized parties. In the case of Target, integrity was compromised when attackers altered systems and installed malicious software, making the data and processes unreliable. Meanwhile, the attack on Dyn demonstrated a failure in availability, as many major websites became inaccessible due to a large-scale disruption.
2. An e-commerce website must prioritize different aspects of the CIA triad depending on the system it is protecting. For product pages, availability is the most important because customers need constant access to browse items, while integrity ensures that prices and descriptions remain accurate, and confidentiality is less critical since the information is mostly public. In contrast, for the payment processing system, confidentiality becomes the top priority to protect sensitive financial data, followed closely by integrity to ensure transactions are correct, while availability, although still important, may be slightly less critical than preventing data breaches.
3. The principle of least privilege means that users or systems are only given the minimum level of access necessary to perform their tasks. This approach supports confidentiality by restricting access to sensitive data, ensuring that only authorized individuals can view or handle it. As a result, it reduces the risk of data leaks, prevents unnecessary exposure, and limits potential damage if an account or system is compromised.