From the course: ISC2 Certified in Cybersecurity (CC) Cert Prep
Unlock this course with a free trial
Join today to access over 26,200 courses taught by industry experts.
Non-repudiation
From the course: ISC2 Certified in Cybersecurity (CC) Cert Prep
Non-repudiation
Another important focus of some security controls is providing non-repudiation. Let's walk through what that term means. Repudiation is denying that something is true. Non-repudiation is a security goal that prevents someone from falsely denying that something is true. For example, imagine that you agree to pay someone $10,000 in exchange for a car. If all you have is a handshake agreement, you might later be able to repudiate your actions. You could claim that you never agreed to purchase the car, or that you agreed to pay a much lower price. We solve this kind of problem by using signed contracts when we buy a car. Your signature on the document is proof that you agreed to the terms, and if you ever go to court, the person selling you the car can prove that you agreed by showing the judge the signed document. Physical signatures provide non-repudiation on contracts, receipts, and other paper documents. The signature on the page is hard to deny once it's there, and that's the whole…