Confidentiality

Question 1

Confidentiality

Answer 1

Definition: - Refers to the protection of information from unauthorized access and disclosure.
- Ensure that private or sensitive information is not available or disclosed to unauthorized individuals, entities, or processes.

Question 2

Confidentiality is important for 3 main reasons

Answer 2

To protect personal privacy
To maintain a business advantage
To achieve regulatory compliance
- PII (Personal Identifiable Information)
- PHI (Protected Health Information)
- Various types of financial data

Question 3

Five Basic Methods to ensure Confidentiality

Answer 3

Encryption / Access Controls / Data Masking / Physical Security Measures / Training and Awareness

Question 4

Exam tips

Answer 4

Confidentiality is to do with Data Protection

Question 5

What is Encryption?

Answer 5

Process of converting data into a code to prevent unauthorized access.

Question 6

What is Access Controls?

Answer 6

By setting up strong user permissions, you ensure that only authorized personnel can access certain types data.

Question 7

What is Data Masking?

Answer 7

Method that involves obscuring specific data within a database to make it inaccessible for unauthorized users while retaining the real data’s authenticity and use for authorized users.

Question 8

What is Physical Security Measures?

Answer 8

Ensure confidentiality for both physical types of data, such as paper records stored in a filing cabinet, and for digital information contained on servers and workstations.

Question 9

Training and Awareness

Answer 9

Conduct regular training on the security awareness best practices that employees can use to protect their organization’s sensitive data