2. Say if the following statements are True or False.

1) Breaches of Confidentiality can occur when information is not run in a manner adequate to safeguard the confidentiality.

2) Loss of one or more of information security attributes can’t endanger the existence of corporate entities.

3) Integrity loss can happen through careful planning.

4) Availability is when a user or system has an access to something.

Vocabulary

3. Find English equivalents of the following phrases in the text.

1) целостность

2) доступность

3) избыток

4) план восстановления

5) случайный

6) злобное намерение

7) несанкционированный доступ

4. Match the words 1-7 with the definitions a-g.

1) confidentiality a) activities viewed with regard to profit

2) availability b) limited to persons authorized to use

information, document

3) integrity c) technical contrivance to prevent accident

4) commercial activities d) accessible

5) safeguard e) the quality or state of being complete or

undivided

6) sensitive document f) occurring unexpectedly or by chance

7) accidental g) concerned with highly classified government

information

5. Find the words in the text which have the similar meaning to the words below.

1) completeness

2) guarantee

3) encode

4) alteration

5) certified

6) regularity

7) organization

6. Read the text below and choose the best option for each gap.

Secrecy of Information

Secrecy is the practice of hiding information from certain individuals or groups, perhaps while sharing it with other individuals. Secrecy is often (1) …………… depending on the content of the secret.

Government secrecy. Governments often attempt to conceal information from other governments or the public. These state secrets can include weapon designs, military plans, diplomatic negotiation tactics, and secrets obtained illicitly from others (“intelligence”). Most nations have some form of Official Secrets Act (the Espionage Act in the U.S.) and classify material according to the level of protection needed (hence the term “classified information”). An individual needs a security clearance for (2) …….……. and other protection methods, such as keeping documents in a safe, are stipulated. Classified information is sensitive information to which access is (3) ……..….. by law or regulation to particular groups of persons. A formal security clearance is required to handle classified documents or access classified data. There are typically several levels (classes) of sensitivity, with differing clearance requirements. This sort of (4) …….…… system of secrecy is used by virtually every national government:

Top Secret (TS): The highest level of classification of material on a national level. Such material would cause “exceptionally grave damage” to national security if made publicly available.

Secret: Such material would cause “grave damage” to national security if it were publicly available.

Confidential: Such material would cause “damage” or be “prejudicial” to national security if publicly available.

Restricted: Such material would cause “undesirable effects” if publicly available.

Unclassified: Technically it is not a classification level, but is used for government documents that do not have a classification listed above. Such documents can sometimes be viewed by those without security (5)………...

Corporate security. Organizations, ranging from multi-national for profit corporations to nonprofit charities, keep secrets for competitive advantage, to meet legal (6) ……..……, or, in some cases, to conceal disreputable behavior. New products under development, unique manufacturing techniques, or simply lists of customers are types of information protected by trade secret laws. The patent system (7) ………….. inventors to publish information in exchange for a limited time monopoly on its use, though patent applications are initially secret. Keeping one's strategy secret is important in many aspects of game theory. Secret societies use secrecy as a way to attract members by creating a sense of importance. Secrecy is central to organized crime. Other laws require organizations to keep certain information (8) …….……, such as medical records (HIPAA in the U.S.), or financial reports that are under preparation (to limit insider trading). Europe has particularly strict laws about database privacy.

Technology of secrecy. Preservation of secrets is one of the goals of information security. Techniques used include physical security and cryptography. The latter depends on the secrecy of cryptographic keys. Many believe that security technology can be more effective if it itself is not kept secret. Information hiding is a design (9) …..…….. in much software engineering. It is considered easier to verify software reliability if one can be sure that different parts of the program only have access to certain information.

1. a) controversial b) decisive c) indisputable

2. a) intrusion b) access c) outlet

3. a) allowed b) restricted c) caused

4. a) hierarchical b) lined c) classified

5. a) clearance b) prohibition c) ban

6. a) requirements b) necessities c) luxury

7. a) encourages b) restrain c) disturb

8. a) secret b) public c) hidden

9. a) principle b) regulation c) activity

7. Look at these examples from the text.

a) Governments often attempt to conceal information from other governments or the public.

b) Most nations have some form of Official Secrets Act and classify material according to the level of protection.

Put the correct preposition into each gap.

1. I’m waiting ……..the postman to arrive.

2. Look ………….. the picture! It’s wonderful.

3. If you have a problem, ask ….. help.

4. Are you interested ……. modern art?

5. Are you good ……at tennis?

6. I agree …..you about most things.

7. My son is afraid……..dogs.

8. Make a presentation about types of secrecy or types of secret information.

Unit 3

Information Security Management

Warm Up

1. What do you know about management in security?

2. What is planning?

3. Is planning important for information security management system?

Reading