Nama : Sultan Chairul
Nim : 2581484737
- Provide a real-world business example for a failure in Confidentiality, Integrity, and Availability?
- How might an e-commerce website prioritize one aspect of the CIA triad over the others for its product pages versus its payment processing system?
- Explain the principle of “least privilege” and how it supports confidentiality?
Answer :
1. Real-world examples of CIA failures
Confidentiality failure
Example: Equifax data breach (2017)
Sensitive personal data of millions of users was exposed due to a security vulnerability.
This shows a failure to protect private information from unauthorized access.
Integrity failure
Example: Toyota software issue
A system error caused cars to behave incorrectly (unexpected acceleration).
This means the system data or logic was not accurate or trustworthy.
Availability failure
Example: Amazon Web Services outage
Many websites and services went down because AWS servers were unavailable.
Users could not access services when they needed them.
2. CIA prioritization in an e-commerce website
Product pages (browsing products):
- Priority: Availability
The site must load quickly and stay accessible. - Next: Integrity
Product details like price and stock should be correct. - Lower: Confidentiality
Less sensitive data is involved here.
In practice, the site might allow slightly outdated data to keep pages fast and available.
Payment processing system:
- Priority: Confidentiality
Protect user payment and personal data. - Next: Integrity
Transactions must be accurate and not manipulated. - Third: Availability
Important, but security is more critical.
In practice, it is better to block a transaction than risk exposing sensitive data.
3. Principle of Least Privilege
Definition:
Least privilege means giving users or systems only the access they need to do their job, nothing more.
How it supports confidentiality:
- Limits who can see sensitive data
- Reduces risk of internal misuse
- Minimizes damage if an account is compromised
Example:
A customer service employee can view order history but cannot access full payment details.
Keterangan : 100 %
Sudah mengerjakan tugas dengan baik dan benar.