{"id":133,"date":"2025-05-28T00:59:22","date_gmt":"2025-05-28T00:59:22","guid":{"rendered":"https:\/\/sites.wp.odu.edu\/cyberimpact1\/?page_id=133"},"modified":"2025-06-26T21:13:04","modified_gmt":"2025-06-26T21:13:04","slug":"it-cyse-200t-2","status":"publish","type":"page","link":"https:\/\/sites.wp.odu.edu\/williamjohnson\/it-cyse-200t-2\/","title":{"rendered":"IT\/CYSE 200T"},"content":{"rendered":"<h1 class=\"p1\" style=\"text-align: center\">Cybersecurity, Technology, and Society<\/h1>\n<p>Throughout my time in IT\/CYSE 200T, I explored how cybersecurity is deeply interconnected with various dimensions of society, including cultural, political, ethical, and business contexts. This course helped me develop a comprehensive understanding of cyber technology not just as a technical tool, but as a force shaping human behavior, law, and global dynamics.<\/p>\n<p><strong>Weekley Journals<\/strong><\/p>\n<p>The weekly journals were instrumental in encouraging continuous engagement with current events and emerging issues in cybersecurity. Each week, I analyzed news articles and academic readings, reflecting on topics like surveillance, ethical hacking, and AI-driven cyber threats.<\/p>\n<p><strong>Week 2 The CIA Triad<\/strong><\/p>\n<p style=\"text-align: center\">Understanding the CIA Triad: A Framework for Secure Systems<\/p>\n<p>The CIA Triad Confidentiality, Integrity, and Availability is a foundational model in information security, guiding the protection of data and systems. It serves as the core framework for organizations to evaluate and implement robust security strategies that mitigate risks and ensure data reliability and system resilience. (Chai, 2022; Whitman &amp; Mattord, 2021)<\/p>\n<p>Confidentiality ensures that sensitive information is accessible only to authorized individuals. It protects data from unauthorized access and disclosure, preserving privacy and organizational secrecy. Techniques such as encryption, access control mechanisms, multi-factor authentication, and data classification policies are commonly employed to uphold confidentiality. In environments like healthcare and finance, where personal and financial data are critical, confidentiality also helps meet legal and regulatory requirements such as HIPAA and GDPR.<\/p>\n<p>Integrity ensures the accuracy, reliability, and consistency of data throughout its lifecycle, protecting it from unauthorized or accidental modifications. This principle guarantees that the information remains unchanged during transit, processing, and storage unless altered by authorized users. Mechanisms such as cryptographic hash functions, checksums, digital signatures, and version control systems are implemented to detect and prevent integrity violations. Upholding data integrity is crucial for informed decision-making, regulatory compliance, and maintaining trust in digital systems.<\/p>\n<p>Availability guarantees that systems and data are accessible to authorized users when needed, ensuring continuity of operations. It emphasizes minimizing downtime and ensuring reliable access to information and resources. Strategies such as system redundancy, load balancing, regular data backups, and disaster recovery planning support this goal. High availability is particularly crucial in mission-critical environments, such as emergency services or online banking, where even brief disruptions can have significant consequences.<\/p>\n<p>The CIA Triad provides a structured and comprehensive approach to protecting information systems by addressing the core security objectives of confidentiality, integrity, and availability. Balancing these elements is essential for building resilient, secure, and trustworthy digital infrastructures (Whitman &amp; Mattord, 2021).<\/p>\n<p>Understanding the distinction between authentication and authorization is crucial in implementing effective security measures. Authentication is the process of verifying the identity of a user or system, typically through credentials such as passwords or biometrics. Authorization, on the other hand, determines the specific permissions and access levels granted to an authenticated entity (Trnka et al., 2022). For instance, logging into an email account involves authentication, while being able to read emails but not accessing administrative settings reflects authorization.<\/p>\n<p>These principles collaborate effectively to create a comprehensive security framework, guaranteeing that only verified users can access designated resources, thereby safeguarding sensitive data from unauthorized access and potential breaches.<\/p>\n<p><strong>Week 3 Human Hacking\u00a0<\/strong><\/p>\n<p style=\"text-align: center\">To Digitize or Not to Digitize: Human Hacking Is the Question<\/p>\n<p>The digitization of human DNA has become increasingly common in recent years and while the scientific advancements are exciting, they also raise some deeply unsettling concerns. Imagine a future where your DNA, the very blueprint of your identity, could be hacked. Yes, your DNA. When we think about identity theft, we typically think of stolen Social Security numbers, dates of birth, or home addresses. But what happens when your most personal information: your genetic code is stolen and used without your knowledge? It\u2019s a chilling thought. Unlike a bank card or driver\u2019s license, your DNA can\u2019t be reissued. It\u2019s permanent. It\u2019s you. The consequences of such theft could be devastating. You could be falsely linked to a crime due to stolen genetic data or have your private health information exposed on the dark web. The threat of cyberbiosecurity is real, and it&#8217;s growing.<\/p>\n<p>But not all aspects of DNA digitization are negative. With proper security and consent, DNA data can be a powerful tool for good. It can help advance medical research, personalize treatments, and even solve cold cases by matching samples in law enforcement databases.<\/p>\n<p>However, serious ethical questions arise. Could employers misuse genetic information to screen job candidates? Where do we draw the line between innovation and invasion of privacy?<\/p>\n<p>It\u2019s both fascinating and frightening to realize that this isn\u2019t science fiction, it\u2019s already happening. We must stay informed, demand better safeguards, and ensure that our genetic identities are protected as carefully as any other form of personal data. Otherwise, the consequences could be catastrophic.<\/p>\n<p><strong>Discussion Board Protecting Availability\u00a0\u00a0<\/strong><\/p>\n<p><strong>Question:<\/strong> You are the CISO for a publicly traded company. What protections would you implement to ensure availability of your systems (and why)?<\/p>\n<p><strong>Response: <\/strong>As a CISO, ensuring system availability is crucial for business success. Outages affect revenue, customer trust, compliance, and shareholder confidence. Availability, a core pillar of the CIA triad, and requires a comprehensive strategy.<\/p>\n<p>Some Key protections I would implement to safeguard availability are:<\/p>\n<ol>\n<li><strong>High Availability (HA) Architecture &amp; Redundancy<\/strong>\u00a0because it designs systems to eliminate single points of failure by using load balancers, redundant systems, and geographically diverse data centers. This ensures uptime even during localized failures.<\/li>\n<li><strong>Disaster Recovery (DR) &amp; Business Continuity Planning (BCP)\u00a0<\/strong>which are essential for responding to catastrophic events. These plans should be regularly tested and clearly define RTO and RPO metrics to ensure quick recovery.<\/li>\n<li><strong>Proactive monitoring &amp; Alerting\u00a0<\/strong>providing Real-time monitoring and automated alerting allow teams to respond to anomalies or system issues before they escalate into full outages. Integration with incident response platforms improves MTTR (Mean Time to Recovery).<\/li>\n<li><strong>Regulatory Compliance &amp; Governance\u00a0<\/strong>ensuring our availability strategies align with frameworks like SOX, ISO 27001, and NIST helps maintain compliance and improves risk posture.<\/li>\n<\/ol>\n<p>System availability is not just a technical issue it\u2019s a strategic business concern. The right mix of technology, process, and governance is essential to ensure our systems stay resilient, especially in today\u2019s threat landscape.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cybersecurity, Technology, and Society Throughout my time in IT\/CYSE 200T, I explored how cybersecurity is deeply interconnected with various dimensions of society, including cultural, political, ethical, and business contexts. This course helped me develop a comprehensive understanding of cyber technology not just as a technical tool, but as a force shaping human behavior, law, and&#8230; <\/p>\n<div class=\"link-more\"><a href=\"https:\/\/sites.wp.odu.edu\/williamjohnson\/it-cyse-200t-2\/\">Read More<\/a><\/div>\n","protected":false},"author":30948,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"_links":{"self":[{"href":"https:\/\/sites.wp.odu.edu\/williamjohnson\/wp-json\/wp\/v2\/pages\/133"}],"collection":[{"href":"https:\/\/sites.wp.odu.edu\/williamjohnson\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sites.wp.odu.edu\/williamjohnson\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/williamjohnson\/wp-json\/wp\/v2\/users\/30948"}],"replies":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/williamjohnson\/wp-json\/wp\/v2\/comments?post=133"}],"version-history":[{"count":5,"href":"https:\/\/sites.wp.odu.edu\/williamjohnson\/wp-json\/wp\/v2\/pages\/133\/revisions"}],"predecessor-version":[{"id":301,"href":"https:\/\/sites.wp.odu.edu\/williamjohnson\/wp-json\/wp\/v2\/pages\/133\/revisions\/301"}],"wp:attachment":[{"href":"https:\/\/sites.wp.odu.edu\/williamjohnson\/wp-json\/wp\/v2\/media?parent=133"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}