Flashcards on Cybersecurity: Concepts, Threats, and Defenses
Cybersecurity: Concepts, Threats, and Defenses Explained
Tap to flip · Swipe to navigate
Privacy & Compliance
19 cards
Card 1
Question: What is a fundamental right related to personal data and privacy?
Answer: Privacy is a fundamental human right; protecting personal data preserves individual freedom and dignity.
Card 2
Question: Give examples of what counts as personal data.
Answer: Names, emails, phone numbers, location data, IP addresses, biometrics, health records, and browsing behavior that identifies an individual.
Card 3
Question: What rights do privacy laws typically grant to individuals regarding their personal data?
Answer: Rights to access, correct, erase ('right to be forgotten'), and port personal data held by organizations.
Card 4
Question: What is data minimization and why is it important?
Answer: Collect only the minimum data necessary; if data is not collected it cannot be breached, and excessive collection creates unnecessary risk.
Card 5
Question: What does 'privacy by design' require when building information systems?
Answer: Incorporating privacy protections from the start, including consent, data minimization, and anonymization during design.
Card 6
Question: How does confidentiality relate to protecting sensitive information?
Answer: Confidentiality ensures information is accessible only to authorized parties, preventing unauthorized reading of sensitive data.
Card 7
Question: Name technical and organizational measures used to achieve confidentiality.
Answer: Encryption, access controls, data classification by sensitivity, and secure communication channels such as SSL/TLS.
Card 8
Question: What principle should be applied to user access to maintain confidentiality?
Answer: The principle of least privilege—grant users only the minimum access needed for their role.
Card 9
Question: Give examples of threats that violate confidentiality.
Answer: Eavesdropping, man-in-the-middle attacks, unencrypted data transmission, and weak password storage.
Card 10
Question: What is information security concerned with across the data lifecycle?
Answer: Protecting data—digital and physical—from unauthorized access, disclosure, modification, or destruction throughout its lifecycle.