Security concepts explained

The world of cyber security can often feel too large and complex for many people to wrap their head around, and whilst it is true – cyber security IS a large and complex field, it can be broken down into a relatively small number of concepts, which IF understood and implemented correctly will greatly reduce the risk of a cyber attack being successful.

These pages provide an overview of many of these concepts.

• 
  The CIA Triad

  The foundation of cyber security.

• 
  The Parkerian Hexad

  Extending the CIA Triad.

• 
  Defence in Depth

  Building layers of cyber security.

• 
  Zero trust

  Never inherently trust, always verify.

• 
  Least Privilege

  Give Users Only the Access They Need.

• 
  Separation of duties

  Don’t Give One Person Complete Control.

• 
  Separation of roles

  Give People the Right Responsibilities.

• 
  Need to know

  Only Give People the Information They Need.

• 
  Fail secure

  When Things Go Wrong, Fail Safely.

• 
  Minimise the attack surface

  Reduce the Opportunities for Attack by reducing what can be interacted with.

• 
  Secure by design

  Build security in from the start, not as a bolt on.

• 
  Privacy by design

  Build privacy in from the start, not as a bolt on.