Chapter 6 Final Revision #1

The privacy of personal information stored on a computer, ensuring it is not accessed by unauthorised parties.

To govern the privacy and security of data through specific regulations to ensure information about individuals or organisations remains private.

• Data must be processed fairly and lawfully. • Data processing is restricted to the stated purpose. • Data must be adequate, relevant, and not excessive. • Data should not be kept longer than necessary.

The measures taken to prevent data loss or corruption and the ability to recover it if it is lost or corrupted.

• Security protects data against loss/corruption. • Privacy protects data against unauthorised access.

The accuracy, completeness, and consistency of data; methods of making sure the data is consistent.

• Enforcing referential integrity. • Cascading update/delete (if data in one table is deleted/edited, all tables are updated). • Validation/verification rules.

• Security is protecting data from loss/corruption. • Integrity is ensuring the consistency/accuracy of the data.

• Validation only checks data is reasonable/within bounds; it does not check that accurate data has been entered. • Verification only checks if the data matches the data given; it does not check if the original data is accurate.

• Install/run a Firewall. • Up to date Antivirus/Anti-malware. • Use a strong (username and) password. • Encryption. • Access rights. • Use back-up software. • Physical methods (e.g. computer kept in a locked room accessed only with a key).

An agreement allowing an individual to use a computer or network server, often requiring a username and password to authenticate the user.

The use of authorisation levels to ensure only specific users see specific data. Different accounts/logins are set up, each with different access rights e.g. read only, no access, read/write. Specific views can be assigned to different users (e.g. managers can only see data for their own shop; a hospital cleaner might not have access to patient data, but a consultant would).

• It should include at least one capital letter, one number, and one special character (e.g., @, *, &). • It requires regular updates to maintain security.

A small item of hardware provided to an individual user that confirms their identity.

• Fingerprint ID. • Face ID. • Retina Scan. Any biological trait unique to the user.

It is when two methods of authentication are used (usually one of them is a password) to authenticate a user.

• To stop the data being lost/corrupted/amended. • To make sure it can be recovered. • To prevent unauthorised access.

Converting plain text (readable text) into cipher text (encoded/scrambled meaningless text) using an encryption key. The data can be understood again after decryption using the decryption key.

To prevent hackers from understanding the data if it is intercepted, maintaining data security. An algorithm/key is required to decode the data.

• The sender hashes the document using a hashing algorithm. • To produce a digest. • The sender encrypts the digest with their private key to create the digital signature. • The document and the signature are sent to the receiver. • The receiver uses the sender’s public key to decrypt the digital signature to reproduce the digest. • The digital signature can only be decrypted with the matching sender’s public key. • The receiver uses the same hashing algorithm on the document received to produce a second digest. • The receiver compares this digest with the one from the digital signature. • If both of the receiver’s digests are the same, the document has not been changed/has not been altered/is authentic.