Protecting Availability

I feel as if everything in the CIA triad is very closely related, so in that case, stuff implemented for confidentiality and integrity would also play a key role in availability of the system as a whole. That being said, here are some of the things I would implement to help achieve availability. 

1. I would ensure that the main server or wherever the main system is housed in a secure location. Whether that be onsite or off. I would do this to try and minimize security risks when it came to different situations including natural disaster, break-ins(hacking), or even employee misconduct.

2. I would ensure that there are ample and up to date backups of the system and the data it houses. Without any backups if the information were to be lost the company would be severely set back, and even worse may even have to close down. Making sure the system is backed up with current data is detrimental to the survivability of the company.

3. This only applies if there are employees who work at home, but I would provide accommodations, meaning hardware, that was capable of accessing the system securely offsite. This would allow people who work from home the access they need to do their jobs without the hassle of coming into the office, especially for trivial things. The only downside to this is that there would be multiple outside connections to the system which could cause more security issues.

4. I would also petition for emergency power such as generators be installed for the system. This will help prevent any system corruptions from power outages, and ensure data stays intact and accessible. 

Leave a Reply

Your email address will not be published. Required fields are marked *