Cyber Security

Concept: The Information Technology Act, 2000 (IT Act 2000) is a law enacted by the Government of India to provide legal recognition to electronic transactions and to deal with cybercrimes. The act establishes a legal framework for electronic governance and ensures security in digital communication and online activities. Main Provisions of the IT Act 2000: 1. Legal Recognition of Electronic Records The act provides legal recognition to electronic documents and digital records. This means electronic records can be used as valid evidence in legal and business transactions. 2. Legal Recognition of Digital Signatures The IT Act allows the use of digital signatures for authentication of electronic documents, ensuring secure online transactions. 3. Regulation of Certifying Authorities The act establishes a system for licensing and regulating Certifying Authorities (CAs) that issue digital signature certificates. 4. Cybercrime and Penalties The IT Act defines various cyber offenses such as hacking, identity theft, data theft, and online fraud, and prescribes penalties and punishments for such crimes. 5. Electronic Governance (E-Governance) The act enables the use of electronic records and digital signatures in government services, allowing online filing of documents, applications, and payments. 6. Protection of Data and Privacy The IT Act provides provisions to protect sensitive personal data and penalizes unauthorized access or misuse of information.

Concept: The CIA Triad is a fundamental model used in cybersecurity to guide policies and practices for protecting information systems. It consists of three key principles: Confidentiality, Integrity, and Availability. These principles ensure that information is protected from unauthorized access, remains accurate, and is available to authorized users when needed. 1. Confidentiality Confidentiality ensures that sensitive information is accessible only to authorized individuals and is protected from unauthorized access or disclosure. Methods used to maintain confidentiality:

• Encryption of data
• User authentication and passwords
• Access control mechanisms

Example: Only authorized employees in a company can access confidential customer data. 2. Integrity Integrity ensures that data remains accurate, consistent, and unaltered during storage or transmission. Unauthorized modification of data must be prevented. Methods used to maintain integrity:

• Data validation checks
• Hash functions and checksums
• Access control and auditing

Example: Financial records in a bank database should not be modified without proper authorization. 3. Availability Availability ensures that information and systems are accessible to authorized users whenever they are needed. Methods used to maintain availability:

• Regular system maintenance
• Data backup and disaster recovery systems
• Protection against cyber attacks such as denial-of-service attacks

Example: Online banking services should be accessible to customers at all times. Summary of CIA Triad: