Assessing Threats, Vulnerabilities, and Risks to FileMaker Pro Databases – FMForums
Steven is always a good read.
Assessing Threats, Vulnerabilities, and Risks to FileMaker Pro Databases
Posted by Steven H. Blackwell, 05 June 2013 · 331 views
Assessing Threats, Vulnerabilities, and Risks to
FileMaker® Pro Databases
Hosted FileMaker Pro databases are susceptible to unauthorized access, manipulation, destruction, and other forms of compromise. Developers and server administrators need to understand how to assess threats and the risks of those risk’s occurring as various threat agents seek to exploit vulnerabilities.
This process starts with an understanding of the environment where the databases operate. We have a variety of digital assets that we must seek to protect. Nowadays, for the most part, the assets we are most concerned about are the hosted databases and the information in them.. We need to be able to protect the Confidentiality, Integrity, and Availability (CIA) of those digital assets.
When a breach of CIA occurs there will be an impact on the digital asset. Understanding and predicting the level of that impact is an important aspect of the assessment we must make. We can generally classify the level of impact into one of four categories:
1. Limited Adverse Impact
2. Serious Adverse Impact
3. Severe Adverse Impact
4. Catastrophic Adverse Impact
The targets of that impact are the people, the assets, the operations, and the reputation of the organization that owns the asset whose CIA is breached. The same event, e.g. a breach of Confidentiality of the asset, may have very different levels of impact on each different target. Likewise, on the same target, a breach of Integrity may have a far more adverse impact than a breach of Confidentiality would.
via Assessing Threats, Vulnerabilities, and Risks to FileMaker Pro Databases – FMForums.