Describe the three dimensions of the CNSS security model and whyeach is important. How does this model help identify gaps in exposure of an InfoSec program?

Answer:

CNSS security model consists of 3 dimensions namely:

1. Confidentiality, integrity, and availability : This provides the assurance from access of data from unauthorized users , and maintains integrity and also provides reliable access to resources when they are needed.

2. Policy, education, and technology : This dimension addresses the use of technology to maintain the integrity and reduces the risks in the system.

3. Storage, processing, and transmission : This dimension controls and safeguards the stored resources

The Important purpose of CNSS model is to identify gaps in exposure of an InfoSec program , It covers all the 3 dimensions of InfoSec , and it omits the discussion of policies which are used in the implementation of controls , Hence the model identifies the gaps in the coverage of an InfoSec program .