Assessing Business Risks Through the Lens of CIA Principles- Confidentiality, Integrity, and Availability
Business risks refer to the instances that can prevent an organization from achieving its goals. To achieve the defined business goals, an organization has to ensure that its organizational website maintains confidentiality, integrity, and availability. An example of a business risk that is likely to impact the confidentiality of an organization’s website is a security risk (Hudakova et al., 2015). Maintaining confidentiality in the organization involves ensuring that unauthorized individuals do not gain access to the various information that can be accessed through the website (Samonas & Coss, 2014). The security risk presents a challenge for maintaining confidentiality in the organization since compromising the security of the website can allow attackers to gain access to the confidential information located in the organization’s system. The occurrence of a security risk can also contribute to the occurrence of loss of integrity in the organization’s system. An example of a business risk associated with integrity is a financial risk (Hudakova et al., 2015). Financial risk involves the loss of finances for the organization. The loss of integrity contributes to the occurrence of financial risk since integrity involves ensuring that the data in the system is not modified by unauthorized individuals, therefore when unauthorized individuals compromise the security of the website, they can modify the financial information of the organization (Samonas & Coss, 2014). Additionally, the loss of integrity can impact the reputation of the organization, and this can cause the organization’s clients to choose its competitors, resulting in financial risk. The aspect of availability can be associated with operational risk (Hudakova et al., 2015). Availability ensures that the various activities performed in the organization are accessible at any time by authorized individuals (Samonas & Coss, 2014). The loss of availability of the website results in operational risk since the activities performed on the website are not available. The security risk presents the greatest risk to the organization. This is because the security risk can also contribute to the occurrence of other risks, such as when attackers compromise the security of the system and modify the data in the system, as well as prevent authorized individuals from accessing the system.
References
Hudakova, M., Buganova, K., Dvorsky, J., Belas, J., & Dana, L. P. (2015). Analysis of the risks of small and medium-sized enterprises in the Zilina region. Communications-Scientific letters of the University of Zilina, 17(1), 34-39.
Samonas, S., & Coss, D. (2014). The CIA Strikes Back: Redefining Confidentiality, Integrity and Availability in Security. Journal of Information System Security, 10(3), 21-45.
ORDER A PLAGIARISM-FREE PAPER HERE
We’ll write everything from scratch
Question
Organizations rely heavily on websites to communicate with potential clients and provide E-commerce capability. This provides business opportunities but also an opportunity for cybercriminals.
• Provide one example of a business risk for each of the CIA principles: confidentiality, integrity, and availability.
• Provide an analysis and explanation regarding which risk presents the greatest threat to the organization.
Make sure to support your thoughts with resources, citing them in APA style. In your response to others, compare and contrast your ideas with theirs.