Ans : There are six principles of security management:-
- Availability- The continuous accessibility of systems tends to procedures, policies and controls which are used to ensure prompt access to data for authorized customers. This purpose secures against deliberate or inadvertent endeavours to refute legitimate costumers’ access to data.
- Integrity of data or systems- System and data integrity is linked to the procedures, policies and controls which are used to guarantee that data has not been modified in an unconstitutional way and that systems are liberated from illicit manipulation that would compromise precision, comprehensiveness and consistency.
- Confidentiality of data or systems- Confidentiality covers the procedures, policies and controls which are utilized to secure data of customers and the organization against illicit access or use.
4. Accountability- Accountability incorporates the procedures, policies and controls essential to follow activities to their source. Accountability specifically underpins nonrepudiation, anticipation, infringement, deterrence, security checking, recuperation and legitimate tolerability of records.
- Assurance- Assurance addresses the procedures, strategies and controls which are used to create certainty that specialized and equipped security measures are working as anticipated.
6. Privacy- It centers on the constitutional rights of people, the motivation behind data assortment and processing, security predilection and the manner in which organizations administer individual’s data. It focuses on how to gather, process, offer, document and erase the information/data as per the law.
