After finding a vulnerability in an internet-facing server of an organization, a cybersecurity criminal is able to access an encrypted file system and successfully manages to overwrite part of some…

The correct answer is B. As control breach. In the CSA Top Threats Analysis methodology, a 'control breach' occurs when an attacker successfully circumvents security controls to gain unauthorized access and the ability to manipulate protected systems. In this scenario, the attacker bypassed access controls on an…

Cloud Security Auditing

Question

After finding a vulnerability in an internet-facing server of an organization, a cybersecurity criminal is able to access an encrypted file system and successfully manages to overwrite part of some files with random data. In reference to the Top Threats Analysis methodology, how would you categorize the technical impact of this incident?

Options

AAs an integrity breach
BAs control breach
CAs an availability breach
DAs a confidentiality breach

How the community answered

(51 responses)

A
4% (2)
B
84% (43)
C
2% (1)
D
10% (5)

Explanation

In the CSA Top Threats Analysis methodology, a 'control breach' occurs when an attacker successfully circumvents security controls to gain unauthorized access and the ability to manipulate protected systems. In this scenario, the attacker bypassed access controls on an encrypted filesystem and was able to overwrite file data - demonstrating that the organization's security controls (access control, encryption as a barrier) were defeated and the attacker achieved unauthorized operational control over the storage system. While overwriting data has characteristics of an integrity impact, the primary technical impact category here is control breach, reflecting the loss of control over the system's protected resources rather than just data modification.

Topics

#Security Incident Impact#Security Controls#Threat Analysis#Cloud Auditing

Community Discussion

No community discussion yet for this question.

Full CCAK Practice