Policy 7230A - Department of Administration

Integrity
The second of the three goals of security, integrity is the process of protecting the
accuracy of information. An example of information for which integrity is important is
financial records.
Availability
The third of the three goals of security, availability is the process of protecting the
access to information. An example of information for which availability is important is
data that is used in consecutive processes.
Authorization
The process of granting/receiving permission to access an information system.
Identification
The process of demonstrating one’s authorized use of an information system.
Authentication
The process of validating one’s identity.
Identifier
A token that is unique to an individual user and is used both in the identification process
for information system access and to correlate actions within that system to the user.
Identifiers do not necessarily have to be kept secret. An example of an identifier is a
user id.
Authenticator
Also referred to as “Something you Are”, the third factor of authentication is usually
some form of biometric measurement that is unique to the user. An example of the
third factor of authentication is a fingerprint.
Incident Response – Preparation Phase
The process of establishing polices, procedures and agreements prior to the occurrence
of a security incident in order to minimize the number of incidents that occur and
accelerate the process of dealing with incidents that do occur.
Incident Response – Detection Phase
The process of determining whether an incident has or has not occurred and the
severity on any incident that has occurred.
Incident Response – Containment Phase
The process of simultaneously preventing the spread of an incident while maintaining
evidence of the occurrence of the incident. Containment can be compromised by the
need to keep mission critical systems in production and must be handled carefully.
51