This phase focuses on resolving a security incident to minimize the impact. Reflection is the follow-up processes necessary to evaluate the quality of the security implementation. These post-incident procedures are necessary for the organization to learn from the incident and share that experience. As well, this book will explore the fundamental aspects of information security, which are the basic building blocks required to create a complete information security environment. Awareness is assuring that everyone understands the importance of security.
Access defines the medium used to contact the resource.
Identification is what is used to identify a user. Authentication is how the user's identity is validated. Authorization is what a user is allowed to do. Availability is the ability to utilize the resource whenever it is needed. Accuracy is the assurance that the information is correct.