Administrative controls are the policies and procedures defined by an organization’s security policy and other regulations or requirements. These controls focus on personnel and business practices.
Examples: policies, procedures, hiring practices, background checks, employee training.
The server understood the request but refuses to authorize it. A server that wishes to make public why the request has been forbidden can describe that reason in the response payload (if any). If authentication credentials were provided in the request, the server considers them insufficient to grant access. The client SHOULD NOT automatically repeat…
The second principle of the CIA Triad is Integrity. Integrity is the concept of protecting the reliability and correctness of data. This concept revolves around making sure all data is protected from unauthorized alterations. Protection Examples: Making sure that data is correct, unaltered, and preserved includes implementing various countermeasures such as strict access control, rigorous…
Any attempt to brew coffee with a teapot should result in the error code “418 I’m a teapot”. The resulting entity body MAY be short and stout.
This status code is not specified in any RFCs, but is used by some HTTP proxies to signal a network connect timeout behind the proxy to a client in front of the proxy.
Data Hiding Data hiding is a protection mechanism. Data hiding is the simple concept of hiding data in a place where it is not easily discovered. This concept is extensively used in security controls and in programming. Example An example of data hiding in an organization is the use of classification labels. A database can…
The user has sent too many requests in a given amount of time (“rate limiting”). The response representations SHOULD include details explaining the condition, and MAY include a Retry-After header indicating how long to wait before making a new request.