Question

Suppose you have three dimensions of harm of concern - confidentiality, integrity, and availability. Following the occurrence of an event, you may or may not suffer a breach of confidentiality, integrity or availability. Whether you suffer loss of confidentiality is statistically independent from loss of integrity or loss of availability. Furthermore, suppose the outcome on each dimension is binary - loss or not. How many mutually exclusive, collectively exhaustive outcome possibilities do you have? List them.

Answer 1

Number of mutually exclusive, collectively exhaustive outcome possibilities = 8

List is as follows:

1.    confidentiality, integrity, availability.

2.    loss of confidentiality, integrity, availability.

3.    confidentiality, loss of integrity, availability.

4.    confidentiality, integrity, loss of availability

5.   loss of confidentiality, loss of integrity, availability

6.   loss of confidentiality, integrity, loss of availability

7.   confidentiality, loss of integrity, loss of availability

8.    loss of confidentiality, loss of integrity, loss of availability