SimplyCPA
Quick Sheets/ISC/Information Security Fundamentals

ISC — Quick Sheet

Information Security Fundamentals

Read time: ~5 minutes

One-minute revision

  • CIA: Confidentiality, Integrity, Availability
  • MFA = factors from different categories (know / have / are); password + security question ≠ MFA
  • Symmetric = one shared key, fast; asymmetric = public encrypts, private decrypts
  • Digital signature: sign with your private key, verify with your public key. Confidential message: encrypt with recipient's public key
  • Ransomware defense = tested offline backups; SQL injection defense = input validation/parameterized queries
  • Principles: least privilege + defense in depth