Module Question 2
- Provide a real-world business example for a failure in Confidentiality, Integrity, and Availability?
- How might an e-commerce website prioritize one aspect of the CIA triad over the others for its product pages versus its payment processing system?
- Explain the principle of “least privilege” and how it supports confidentiality?
Status : 100%
Keterangan : saya sudah mengerjakan tugas ini dengan baik dan benar
Bukti :
1. Examples of Confidentiality, Integrity, and Availability failures
Confidentiality: For example, the case of Tokopedia, where millions of user data were leaked. This shows the system failed to keep user information private.
Integrity: Another example happened at Knight Capital Group. Their system had an error that caused incorrect trading transactions. This means the data and system were not accurate as they should be.
Availability: There was also a time when Amazon Web Services had a server outage, and many websites couldn’t be accessed. This means the system was not available when users needed it.
2. CIA triad priority in e-commerce
Product pages: The main priority is usually availability, because the important thing is customers can open the website and view products without problems.
Payment system: The main priority is confidentiality and integrity, because payment data must stay secure and the transaction amount must be correct, not leaked or changed.
3. Least privilege principle
Least privilege means each person only gets access to what they need for their job, nothing more.The goal is to keep important data safe. So if an account gets hacked, the hacker cannot access everything. This helps protect sensitive information and keeps it confidential.