turvaeesmärgid

Turvaeesmärgid, often translated as security objectives or security goals, are fundamental principles and desired states that an organization aims to achieve to protect its information assets. They serve as the guiding principles for developing and implementing security policies, procedures, and controls. The primary turvaeesmärgid typically revolve around three core pillars: confidentiality, integrity, and availability.

Confidentiality ensures that information is accessible only to authorized individuals or systems. This prevents unauthorized disclosure of sensitive data, such as personal information, trade secrets, or classified documents. Measures to achieve confidentiality include access controls, encryption, and data masking.

Integrity focuses on maintaining the accuracy, completeness, and consistency of information. It means ensuring that data has not been altered or destroyed in an unauthorized manner. Techniques like digital signatures, hashing, and version control are employed to safeguard data integrity.

Availability guarantees that authorized users can access information and systems when needed. This involves protecting against disruptions such as denial-of-service attacks, hardware failures, or natural disasters. Redundancy, backups, and disaster recovery plans are crucial for maintaining availability.

Beyond these fundamental three, additional turvaeesmärgid may include authenticity, which verifies the identity of users and the origin of information, and non-repudiation, which prevents individuals from denying their actions. Establishing clear and well-defined turvaeesmärgid is the first step in creating a robust security posture that aligns with an organization's risk tolerance and business objectives.