So the next important concept that we are going to see is availability, the information availability
is crucial for modern information security.
It is the information being accessible as required, when required, were required and to whom required.
So basically, information availability is that information must be easily accessible by individuals
who need it.
For example, data related to customers must be accessible in the marketing department.
In practice, availability of information requires a control system such as, for example, the big
backup of data and the capacity planning procedures and criteria for approval of the systems.
Now, the incident management procedures, the management of removable media, the information processing
procedures, the maintenance and testing of equipment, continuity consent procedures, as well as the
procedures to control the usage of systems, ensure that the data is available then and that it is needed.
Now, when it comes to information security, physical security is not provided in an organization,
if the physical security is not provided, the access to unauthorized personnel would be unchallenged.
This means that if information is not protected through physical security, the organization would be
subject to theft, natural disaster and other physical security addresses reliability and accessibility
of the data.
Now auditing and system effectiveness of evaluation.
A type of audit, which is very important, what availability is the system effectiveness evaluation,
which shows how well the system meets the need of the organization by taking a larger view of the system
and the organization's auditing systems?
And this is the clarity and timeliness of the information.
Next comes security policies, the security policy of a system should determine who is using the system
and set the user privileges, current and future decisions should be based on the enterprise, the security
policy.
Security policies addresses impliedly timeliness and the accessibility of information, we have seen
security policies in all directions.
I have also explained to you about security policies, so I would not I will not stress upon this point
in this lecture.
System monitoring and operational control as well.
Operational controls are rules.
Please listen closely.
Operational controls are the rules that should be implemented and monitored in order to protect the
information of the organization, the implement the security policy.
And in this, we provide greatly to enforce the security policy.
So you can see that all these things are interdependent.
System monitoring is dependent on security policies.
And while auditing, we ensure that all the security policies are in place and they can be enforced.
The system monitoring and the operational controls work toolkit.
So this is how basically availability is very important.
Now, next comes business continuity.
Business continuity is a very important component in maintaining operations in cases of network attack.
Now, without a business continuity plan, the organization will not be sure that the last information
can ever be restored.
That is why business continuity addresses the timeliness and the accessibility.
Backups are very important.
Backups are a copy of all the information applications on operating system settings that are stored
within the computer to reduce the amount of loss and provide maximum restorable capability to the organization.
Backups at risk, timeliness and accessibility.
That is why I always tell my students to backup their data at least once a month, either in the cloud
or in their hard drives.
Now we'll see what is available to me by taking the example of Bob, Judy and a server.
Now, you can see that Bob is trying to access some data from the server here, but since the definition
of availability speeds, that data should be a bit available when and where it is needed.
Now, let us have Trudy, who is completely, you know, bombarding the packets on the server and the
server is not functioning anymore.
So Bob here will not be receiving any data, which means the availability principle of information security
is being violated.
Now, many cases when the server is not able to deliver the messages, all the information to its customers,
mostly, it's probably because of the availability issues.
And the most obvious reason is the denial of service attack by malicious hackers.
So I hope you understood the meaning of the security element of availability and what are the different
factors that affect availability?
That's it.
Those are the three lectures that we just see of a man to have an overview of the CIA tried to you.
And we will be looking after the CIA in upcoming elections in that in depth.
So don't worry for time.
We just make sure that you have understood the definitions of these terms and what are the elements
of information security in the next lecture will talk about different and distinct with respect to ethical
hacking.
I will see you in the next lecture.