Question

1. Consider an automated teller machine (ATM) in which users provide a personal identification number (PIN) and a card for account access. Give example of confidentiality, integrity, and availability requirements associated with the system and in each case, indicate the degree of importance of the requirement.
2. Please make sure that you indicate the degree of importance of the requirement for each. Thanks

Answer 1

As PIN and card is required for account access so anybody who is aware about PIN they can use the card for account access.

So it is much required that personal identification number must be kept confidential during transaction time in host system. Host system must be having data confidentiality as it is storing PIN numbers during access and also validating with server.

ATM Machine must be having availability of money and system must be up and running. Non-availability of system might lose the confidence of customers and it can impact market value for the bank. Though it is not that concerning.

Integrity must be maintained in terms on transactions for example transactions must be atomic. If 200 is debited than account must reflect the same otherwise it will cause unexpected loss for customer.