State two ways through which confidentiality of information can be achieved. Give an example of a scenario where availability can be compromised. State three characteristics of information that make it useful for decision-making.

Here are the solutions with explanations for question 7 (ii).

7. (ii)

a) State two ways through which confidentiality of information can be achieved.
Two ways through which confidentiality of information can be achieved are:

1. Access Control: Implementing strict access controls ensures that only authorized individuals, processes, or systems can view or access sensitive information. This includes mechanisms like user authentication (passwords, biometrics) and authorization (roles, permissions).
2. Encryption: Encrypting data, both at rest (stored) and in transit (transmitted), transforms it into an unreadable format using cryptographic algorithms. Only those with the correct decryption key can convert the data back into its original, readable form.

b) Give an example of a scenario where availability can be compromised.
An example of a scenario where availability can be compromised is a Distributed Denial of Service (DDoS) attack. In this scenario, multiple compromised computer systems (a botnet) flood a target server or network with a massive volume of traffic, overwhelming its resources and making it unable to respond to legitimate user requests. This renders the service or information unavailable to its intended users.

c) State three characteristics of information that make it useful for decision-making.
Three characteristics of information that make it useful for decision-making are:

1. Accuracy: The information must be correct, free from errors, and reliable. Inaccurate information can lead to flawed analysis and poor decisions.
2. Timeliness: The information must be available when needed and up-to-date. Outdated information may no longer be relevant or reflect the current situation.
3. Relevance: The information must be pertinent and directly related to the decision being made. Irrelevant information can distract from key issues.