What are the three primary goals of information security?
A.
Authenticity, repudiation, and accountability
B.
Availability, confidentiality, and integrity
C. Authenticity, confidentiality, and accountability
D.
Availability, authenticity, and confidentiality
Explanation:
Information Security Framework
The basic information security framework is built to achieve four security goals, confidentiality,
integrity, and availability (CIA) along with accountability. This framework incorporates all security
standards, procedures and controls, required to mitigate threats in the storage infrastructure
environment.
Confidentiality: Provides the required secrecy of information and ensures that only authorized
users have access to data. This requires authentication of users who need to access information.
Data in transit (data transmitted over cables) and data at rest (data residing on a primary storage,
backup media, or in the archives) can be encrypted to maintain its confidentiality. In addition to
restricting unauthorized users from accessing information, confidentiality also requires to
implement traffic flow protection measures as part of the security protocol. These protection
measures generally include hiding source and destination addresses, frequency of data being
sent, and amount of data sent.
Integrity: Ensures that the information is unaltered. Ensuring integrity requires detection and
protection against unauthorized alteration or deletion of information. Ensuring integrity stipulate
measures such as error detection and correction for both data and systems.
Availability: This ensures that authorized users have reliable and timely access to systems, data
and applications residing on these systems. Availability requires protection against unauthorized
deletion of data and denial of service. Availability also implies that sufficient resources are
available to provide a service.
Accountability: Refers to accounting for all the events and operations that take place in the data
center infrastructure. The accountability service maintains a log of events that can be audited or
traced later for the purpose of security.
EMC E10-001 Student Resource Guide. Module 14: Securing the Storage Infrastructure