BADM
7401
-
Cybersecurity
-
Exam
1
Access
Control
User
Privileges
-
ANS-Read,
Write,
Execute,
Delete
Accountability
-
ANS-AKA
"Auditability"
The
access
control
mechanism
that
ensures
all
actions
on
a
system
--
authorized
or
unauthorized
--
can
be
attributed
to
an
authenticated
identity.
Asset
Valuation
-
ANS-The
process
of
assigning
financial
value
or
worth
to
each
information
asset.
Attack
-
ANS-An
ongoing
act
against
an
asset
that
could
result
in
a
loss
of
its
value.
Authentication
-
ANS-The
access
control
mechanism
that
requires
the
validation
and
verification
of
an
unauthenticated
entity's
purported
identity.
Authorization
-
ANS-The
access
control
mechanism
that
represents
the
matching
of
an
authenticated
entity
to
a
list
of
information
assets
and
corresponding
access
levels.
Availability
-
ANS-An
attribute
of
information
that
describes
how
data
is
accessible
and
correctly
formatted
for
use
without
interference
or
obstruction.
Baseline
-
ANS-An
assessment
of
the
performance
of
some
action
or
process
against
which
future
performance
is
assessed;
the
first
measurement
(benchmark)
in
benchmarking.
Benchmarking
-
ANS-An
attempt
to
improve
information
security
practices
by
comparing
an
organization's
efforts
against
practices
of
a
similar
organization
or
an
industry-developed
standard
to
produce
results
it
would
like
to
duplicate.
Categories
of
Unethical
Behavior
-
ANS-Ignorance,
accident,
and
intent.
CISO
Responsibility
-
ANS-See
that
InfoSec
functions
are
adequately
performed
somewhere
within
the
organization.
These
leaders
will
increasingly
widen
their
perspectives
beyond
the
IT
scope
of
an
issue
and
consider
the
impact
across
the
whole
organization.
Confidentiality
-
ANS-The
most
desirable
characteristic
for
privacy.
An
attribute
of
information
that
describes
how
data
is
protected
from
disclosure
or
exposure
to
unauthorized
individuals
or
systems. Contract
Employees
-
ANS-Usually
need
access
only
to
specific
facilities,
and
they
should
not
be
allowed
to
wander
freely
in
and
out
of
buildings.
Convergence
-
ANS-Merging
of
management
accountability
in
the
areas
of
corporate
(physical)
security,
corporate
risk
management,
computer
security,
network
security,
and
InfoSec.
Cost
Avoidance
-
ANS-The
financial
savings
from
using
the
defense
risk
control
strategy
to
implement
a
control
and
eliminate
the
financial
ramifications
of
an
incident.
Deliverables
of
TVA
and
Threat
Severity
Weighted
Table
Analysis
-
ANS-A
prioritized
list
of
assets
and
their
vulnerabilities
and
a
prioritized
list
of
threats
facing
the
organization.
Deontological
Ethics
-
ANS-The
study
of
the
rightness
or
wrongness
of
intentions
and
motives
as
opposed
to
the
rightness
or
wrongness
of
the
consequences.
Also
known
as
duty-based
or
obligation-based
ethics,
this
approach
seeks
to
define
a
person's
ethical
duty.
Different
Types
of
Controls
-
ANS-Managerial,
Operational,
and
Technical
Digital
Forensics
-
ANS-Investigation
involving
the
preservation,
identification,
extraction,
documentation,
and
interpretation
of
computer
media
for
evidentiary
and
root
cause
analysis.
Like
the
traditional
variation,
this
follows
clear,
well
defined
methodologies
but
still
tends
to
be
as
much
art
as
science.
Discretionary
Access
Control
(DAC)
-
ANS-Access
controls
that
are
implemented
at
the
discretion
or
option
of
the
data
user.
EISP
(Enterprise
Information
Security
Policy)
-
ANS-Highest
Level
of
Policy
-
sets
the
strategic
direction,
scope,
and
tone
for
all
of
an
organization's
security
efforts.
Elements
of
an
InfoSec
Program
-
ANS--
Policy
-
Policy
Management
-
Risk
Management
-
Life-Cycle
Planning
-
Personnel
/
User
Issues
-
Preparing
for
Contingencies
and
Disasters
-
Computer
Security
Incident
Handling
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller AnswersCOM. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $7.99. You're not tied to anything after your purchase.
