Page 678

The University of Sydney Page 9A security model to be selected depends on the organization type and environment–True–Organizationtypeandenvironmentdecidethenatureoftheinformationandsecuritypolicies.Forexample,–Militaryorganizationtargetsdataconfidentiality–Commercialorganizationsfocusesdataintegrity–Securitymodelstargetsdifferentaspectsofsecurityofdata.–BLPmodel:Dataconfidentiality–Bibamodel:Dataintegrity–Therefore,whenselectingsecuritymodels,theyhavetoconsidertheinformationandsecuritypolicywithintheorganizationwhichdependsontheorganizationtypeandenvironment.