Question

You have been hired as a contractor to help a new bank/credit union called WeServeU. You’ve been asked to help them design their cybersecurity policies, specifically how they can be highly conscientious about the AIC triad as they form their policies.
Write at least three sentences each explaining how a banking institution might need to think about the aspect of the AIC triad: confidentiality, integrity, and availability. You can cover both the basic concept of the term and concrete policy recommendations related to the term in your answer. For now, WeServeU is mostly concerned about internal access—in other words, how their own employees and the company itself will manage data; you’ll help them with their customer-facing website in a future activity.

Rubric
Student includes at least three sentences related to maintaining confidentiality—rules limiting access to certain information (e.g., customer service reps shouldn’t be able to see social security numbers).


Student includes at least three sentences related to integrity in their answer—ensuring the information can’t be altered or deleted by unauthorized people (e.g., access to information requires password protection; backups of data are saved and secured regularly; proper security against external breaches is applied etc.).


Student includes at least three sentences related to availability in their answer—making sure that access to information is always available (e.g., through redundant systems, solid IT staff, good disaster recovery and system upgrade policies, etc.).

Answer 1

confidentiality,

The first part of the AIC triad that WeServeU needs to consider is confidentiality. Confidentiality is important because it makes sure that important data is viewed only by authorized personnel.

integrity

Living, working, and leading in integritymeans that we don’t question ourselves.

availability.

Availability is one of the most critical parts of the warranty of a service. If a service does not deliver the levels of availability required, then the business will not experience the value that has been promised. Without availability the utility of the service cannot be accessed