Secure Operations

Blog of Joe Jeansonne

Uncategorized

Can someone give examples of Grave Damage (Top Secret), Critical Damage (Secret), Serious Damage(Confidential)?

by Joe Jeansonne · 2019-07-06

Ts.. reveals sources and methodologies… Human Intelligence sources like names of spies would fall under this. Secret – stuff that can be damaging, Troup movements and size of units can fall under here (or ts.. context is everything) or systems and their purposes and vulnerabilities (generally protected at the level of the network). Classified.. orders for units, deployment dates.. can be as low as classified.
The fun part ois aggregation of lower level info can result in higher classifications..

https://www.facebook.com/groups/1525346961013038/permalink/2301921336688926/

Tags: CISSP Mandatory Access Control

You may also like...

Innovation, Not Regulation, Will Protect Corporations From Deepfakes
If CEOs want to prevent their firm from being the next victim of a high-profile deepfake scam, they need to double cybersecurity funding immediately.
New AI Security Startup Apex Secures AI Models, Apps
The AI security startup’s platform will allow organizations to define appropriate AI usage and enforce security policies.
Mimic Launches With New Ransomware Defense Platform
The new startup’s SaaS platform claims to help organizations detect ransomware attacks faster than “traditional” methods and to recover within 24 hours.
Billions of Android Devices Open to 'Dirty Stream' Attack
Microsoft has uncovered a common vulnerability pattern in several apps allowing code execution; at least four of the apps have more than 500 million installations each; and one, Xiaomi's File Manager, has at least 1 billion installations.
DPRK's Kimsuky APT Abuses Weak DMARC Policies, Feds Warn
Organizations can go a long way toward preventing spoofing attacks by changing one basic parameter in their DNS settings.
Software Security: Too Little Vendor Accountability, Experts Say
Actual legislation is a long shot and a decade away, but policy experts are looking to jump-start the conversation around greater legal liability for insecure software products.
Hacker Sentenced After Years of Extorting Psychotherapy Patients
Two years after a warrant went out for his arrest, Aleksanteri Kivimäki finally has been found guilty of thousands of counts of aggravated attempted blackmail, among other charges.
Dropbox Breach Exposes Customer Credentials, Authentication Data
Threat actor dropped in to Dropbox Sign production environment and accessed emails, passwords, and other PII, along with APIs, OAuth, and MFA info.
Name That Edge Toon: Puppet Master
Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.
Safeguarding Your Mobile Workforce
Establishing a robust BYOD security strategy is imperative for organizations aiming to leverage the benefits of a mobile-first workforce while mitigating associated risks.