What principles should the information security analyst apply in order to develo

Question

What principles should the information security analyst apply in order to develop appropriate password policies for their clients? Make sure you address confidentiality, integrity, and availability of information, as well as each of the following aspects:

i. Password length and composition of the password (e.g., uppercase, numbers, special characters)

ii. Time period between resets and ability to reuse a prior password

iii. Differentiated policies for different types of users (e.g., administrator vs. regular user)

Explanation / Answer

There are many security politics in the context of requirements for information security and there are many circumstances that must be met and there are many security mechanisms that should be followed.
There are many organisations mainly follow three main requirements like confidentiality, integrity and availability.
The data shold be only authorised to individuals
confidentiality: It is one of the requirement which is helpful to keep the information disclosed and does not make the information to come out.
Integrity: it is a requirement that is mentioned to make the information available to trhe specified author. These are mainly occured for preventing errors and omissions and controlling the effects of program change.
Availability: It is a requirement that is placed to ensure that system work promptly and denied to authorized users.
The password length should be kept efficiently by keeping some regular expressions to make the password very strong and should write the functions for time period to reset the passwords. Should keep the password and users for completely and individually for the administrator and regular users.

Related Questions

Navigate

• Browse (All)
• Browse W
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.