The IT Law Wiki
Line 7: Line 7:
 
=== System security ===
 
=== System security ===
   
The five '''security objectives''' for [[system security]] are [[integrity]], [[availability]], [[confidentiality]], [[accountability]], and [[assurance]].<ref>[[NIST Special Publication 800-33]], at 22.</ref><span lang="EN-GB" style="font-size:12.0pt;mso-bidi-font-size: 10.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:"Times New Roman"; mso-ansi-language:EN-GB;mso-fareast-language:EN-US;mso-bidi-language:AR-SA">should not concentrated on specific security requirements.</span>
+
The five '''security objectives''' for [[system security]] are [[integrity]], [[availability]], [[confidentiality]], [[accountability]], and [[assurance]].<ref>[[NIST Special Publication 800-33]], at 22.</ref><span lang="EN-GB" style="font-size:12.0pt;mso-bidi-font-size: 10.0pt;font-family:"Times New Roman","serif";mso-fareast-font-family:"Times New Roman"; mso-ansi-language:EN-GB;mso-fareast-language:EN-US;mso-bidi-language:AR-SA">should not concentrated on specific security requirements. This is not good enough.</span>
   
 
== References ==
 
== References ==

Revision as of 04:44, 8 November 2012

Definitions

General

A security objective is a statement of intent to counter specified threats and/or satisfy specified organizational security policies or assumptions.

System security

The five security objectives for system security are integrity, availability, confidentiality, accountability, and assurance.[1]should not concentrated on specific security requirements. This is not good enough.

References