Cyber Security Foundations and Threat Landscape
What Cyber Security Protects
Core mission
Cyber security protects systems, networks, applications, and data from unauthorized access, misuse, disruption, and destruction. Its goal is to preserve confidentiality, integrity, and availability, often called the CIA triad.
Why this matters
Most real-world incidents are not caused by a single flaw; they are caused by a chain of weaknesses across people, process, and technology.
The CIA triad
| Principle | Meaning |
|---|---|
| Confidentiality | Only authorized parties can view data |
| Integrity | Data and systems remain accurate and trustworthy |
| Availability | Authorized users can access services when needed |
Threat actors and attack goals
Common threat actors
Typical attacker goals
Financial theft
- Steal credentials or payment data
- Extort victims with ransomware
Espionage
- Collect secrets over long periods
- Hide activity to avoid detection
Which security goal is primarily violated when an attacker alters a database record without permission?
Unauthorized data modification is an integrity failure.
Correct answer: Integrity
Name the three parts of the CIA triad.
These are the foundational security objectives used to evaluate risk and controls.
Correct answer: Confidentiality, integrity, and availability
Which example best represents a threat actor rather than a vulnerability?
A threat actor is an entity that can cause harm; the other options are weaknesses.
Correct answer: A criminal group targeting banks
Why is availability important for a hospital system?
Availability failures can directly affect safety and operations.
Correct answer: Because clinicians need reliable access to systems and patient data when making time-sensitive decisions