Security and Privacy Foundations
Mike Chapple, Joe Shelley, James Michael Stewart · 2025
This chapter provides a comprehensive understanding of key principles such as confidentiality, integrity, availability, authentication, authorization, and accounting. It delves into the intricacies of privacy in the modern era and the foundational principles that guide privacy practices. The chapter also covers critical frameworks and policies that provide structure and guidance for security and privacy initiatives. It discusses the foundations of creating and enforcing policies, establishing security awareness programs, and developing strategic approaches to security and privacy management. This is vital for protecting the organization's assets and ensuring compliance with regulatory requirements. Policies are high-level statements that reflect the organization's values and goals. They provide the overall direction and set the tone for the security and privacy posture. Education and training are at the heart of a security awareness program.