CISSP-ISSMP: Information Systems Security Management ProfessionalDemo

Shoulder surfing is an in-person attack in which an attacker collects information about an organization’s premises. It is often carried out by secretly watching an employee’s keyboard while the employee enters a password at an access point, such as a terminal or website. Which of the following is violated by a shoulder-surfing attack?