Ciberseguridad, riesgos y amenazas

What are the fundamental pillars of cybersecurity?

The fundamentals of cybersecurity are crucial to protect any organization against risks and threats. This field is underpinned by the three essential pillars: confidentiality, integrity and availability, known as the CIA pillars (Confidentiality, Integrity, Availability). Understanding these concepts is essential for any cybersecurity professional.

• Confidentiality: Ensures that information is only accessible to authorized persons.
• Integrity: Ensures that information is not altered in an unauthorized manner.
• Availability: Ensures that information is accessible to authorized users when necessary.

How do authentication and authorization differ?

Authentication and authorization are critical concepts in cybersecurity, fundamental for access control in systems and applications.

• Authentication: It is the process of verifying a user's identity. Methods such as passwords, biometrics or security tokens are used. Example: entering a code sent to a cell phone to access an account.
• Authorization: Once authenticated, it determines which resources the user can access. Example: an authenticated user can view the contents of a folder, but not modify it.

How to perform a risk analysis in cybersecurity?

A risk analysis is a crucial strategy to identify and mitigate potential threats in an organization.

1. Risk identification: Understanding the risks to which the company is exposed.
2. Probability and impact assessment: Determine how likely each risk is and what its impact would be.
3. Gap analysis: Compare the current state of security with the desired state.
4. Action plan: Establish measures to mitigate the identified risks.

Understanding and applying these steps will allow you to establish a more robust and reliable cybersecurity in your organization.

How to classify threats and what controls to implement?

Threats can be classified and managed through different types of controls:

• External and internal threats: Threats can come from inside or outside the organization.
• Types of attackers: Each attacker may have different motivations, such as financial or ideological.

Types of controls

1. Preventive controls: Designed to prevent a threat from materializing. Example: firewalls.
2. Detection controls: Identify threats that have already manifested themselves. Example: intrusion detection systems.
3. Corrective controls: Applied to reduce the impact of a threat that has materialized. Example: emergency plans.

Final tips!

While the exam will not ask you to do a financial analysis of risks or know about fines for non-compliance with regulations, it is important to have a general understanding of how standards and regulations work in the field. Practice with examples and questions to reinforce your understanding and confidence in the subject - keep learning and you'll find yourself well prepared for the Security+ exam!