Nama : Isalora Simanjuntak
Nim : 2681498454
QUESTIONS
- Provide a real-world business example for a failure in Confidentiality, Integrity, and Availability?
- How might an e-commerce website prioritize one aspect of the CIA triad over the others for its product pages versus its payment processing system?
- Explain the principle of “least privilege” and how it supports confidentiality?
ANSWER NO.1
- Confidentiality
Equifax
In 2017, Equifax experienced a massive data breach that exposed the sensitive information of approximately 147 million people, including Social Security numbers and other personal data.
Business Impact:
- Loss of customer trust
- Lawsuits and billions of dollars in fines
- Damage to the company’s reputation
- Integrity
Toyota
Toyota experienced large-scale vehicle recalls due to software and control system issues that affected system accuracy and reliability.
Business Impact:
- Data and systems did not function as intended
- Significant recall costs
- Decline in consumer trust
- Availability
TikTok Shop – TikTok
During major double-date promotions (such as 11.11 or 12.12), TikTok Shop experienced an extremely high surge in users. However, the company did not prepare sufficient servers and infrastructure to handle the traffic.
As a result:
- The application became inaccessible
- Payment transactions failed
- The system became slow or crashed
This situation represents a failure in availability, as the system was not accessible when users needed it most.
ANSWER NO.2
- Prioritization of CIA Triad in E-commerce Systems
Product Pages prioritize Availability because they must always be accessible to customers. Integrity is also important to ensure that prices and product information are accurate, while Confidentiality is less critical since the data is public.
Payment Processing Systems prioritize Confidentiality and Integrity because they handle sensitive data such as credit card information and transactions. Availability remains important, but protecting data and ensuring transaction accuracy are far more critical.
ANSWER NO.3
- Least Privilege Principle
The least privilege principle is a security concept stating that each user, account, or system is given access only to the resources necessary to perform their tasks.
This principle supports Confidentiality in the following ways:
- Limits access to sensitive data
Not everyone can view critical information, such as customer or financial data. - Reduces the risk of data breaches
If an account is compromised, the impact is limited because access is restricted. - Prevents internal misuse
Employees cannot access data outside their responsibilities.