SSCP: Systems Security Certified Practitioner

Kerberos uses symmetric keys and can provide integrity protection and confidentiality. It relies on a reachable Key Distribution Center for ticket issuance, but does not itself provide an availability or denial-of-service solution.

PGP encrypts the actual message data with a symmetric encryption algorithm because it is efficient for bulk data. The symmetric session key is subsequently protected using asymmetric cryptography.

Backup and recovery, contingency planning, and operating procedures are operational activities used to run, maintain, and restore systems. Auditing is an independent examination of records and activities to assess compliance and the adequacy of controls, rather than an operational control itself.

Network security protocols, network authentication services, and data encryption services are telecommunications elements used to protect confidentiality. Passwords are authentication credentials rather than a telecommunications confidentiality service. NIST likewise distinguishes confidentiality from authentication as separate OSI security services.

The data or information owner is accountable for classifying information and establishing the protection requirements and controls appropriate to its sensitivity and criticality. NIST defines an information owner as the official responsible for establishing controls for an information’s generation, classification, collection, processing, dissemination, and disposal.