Definitions of Business, E- Business, and Risk Business: An organization involved in trade of goods and/or services to the consumers E-Business: Application of information and communication technology in business activities Risk: The potential of losing something of value weighted against the potential of gaining something of value
CIA Triad One of the core principles of information security Consists of: Confidentiality: Preventing disclosure of information to unauthorized parties Integrity: Maintaining and assuring accuracy and consistency of data Availability: The information must be available when needed
CIA Triad Add-On Added principles for the CIA Triad Authenticity: The necessity to ensure that data, transactions, communications, and documents are genuine Authority: Power given from the higher-up to access and modify data Accountability: The acknowledgement and assumption of responsibility for one’s actions and decisions
Business Continuity and Disaster Recovery Planning The processes, policies, and procedures that are related to preparing for recovery or continuation of technology infrastructure after a disaster, natural or human-induced Business continuity focuses on planning to keep all aspects of a business functioning in the midst of disruptive events Disaster recovery focuses on the IT or technology systems that support business functions