Data Confidentiality

Uko Confidentiality Irindwa (Controls)

• Encryption: Ni uguhindura amakuru m'uburyo budasomeka, agasomwa n'umuntu ufite urufunguzo (secret key) gusa.
• Access Control Lists (ACLs): Ni ukwemeza ugomaba kubona amakuru runaka, Urugero: files zigomba kubonwa na admin gusa.
• Multi-Factor Authentication (MFA): Kugera ku makuri biba bikeneye izindi nzira ziyongera kuri password. Urugero: Nimba ushyizemo password yanyayo, hari code ihita yoherezwa kuri telephone ukayishyira muri sisiteme ushaka kwinjiramo, kuburyo password ntago iba ihagije ko winjira muri sisiteme.
• Data Classification: Ni ugushyira amakuru mu byiciro hagendewe k'uburemere bwayo. Amakuru asanzwe (Public), Ayumwihariko (Confidential), Ayo murwego rwo hejuru (Top secret)

Ibishyira Confidentiality Mukaga (Threats)

• Eavesdropping: Umuntu wumviriza amakuru ari guhererekanywa k'umirongo y'itumanaho. Urugero: umu hacker kuri Wi-Fi rusange (public Wi-Fi).
• Man-in-the-Middle: Umugizi wa nabi winjiye mw'itumanaho riri hagati y'abantu babiri.
• Insider Threats: Umukozi ukoresha nabi, cyangwa wandarika ububasha afite bwo kugera k'umakuru runaka.
• Data Breaches: Gusohoka cyane kw'amakuru akomeye (sensitive data) mu buryo bw'impanuka (accidentally).