Cmis 422 - Study guides, Class notes & Summaries

CMIS 422 - Exam 2, Review Questions and answers/ verified/ How long is a Strategic Plan? - -5 years How long is a Tactical Plan? - -1 year How long is an Operational Plan? - -day to day What is Governance? - -The entire function of controlling the processes used by a group to accomplish the same objective. Why is Governance important? - -Governance is important because you need ongoing governance to implement a strategy InfoSec governance wants to achieve 5 goals:

Laws - Rules that mandate or prohibit certain behavior and are enforced by the state. Ethics - Principals that regulate and define socially acceptable behavior. Liability - The legal obligation of an entity extending beyond criminal or contract law; includes the legal obligation to make restitution. Restitution - The legal obligation to compensate an injured party for wrongs committed. Due Care - The legal standard requiring a prudent organization to act legally and ethically and know the ...

Difference between strategic, tactical, and operational planning - Strategic = 5 / Several Years (Policy Documents) Tactical = 1 year (process documents) Operational = day to day (Procedure Documents) What is governance? Why is it important? - The entire function of controlling, or governing, the processes used by a group to accomplish some objective. What goes into an EISP (Enterprise InfoSec Policy)? - (Policy Level Document) EISP sets strategic direction, scope, and tone for all secur...

CMIS 422 TEST WITH CORRECT ANSWERS...

CMIS 422 - Exam 1 Review Questions and answers/ rated A+ Can you define "Information Security" - -"The protection of information and its critical elements, including systems and hardware that use, store, and transmit that information." It is made up of People, Procedures, and Technology. How is Information Security different from Cybersecurity? - -Information Security is the same thing as Cybersecurity. How is Information Security different from Computer Security? - -Computer Secu...

"a strategic plan to accomplish the organization's information security objectives" - does not like this language... Should not be security objectives, always business objectives or problems "Management must integrate information security practices into the fabric of the organization" - DO like this language (baked in the pie) To implement a strategy, you need - ongoing governance the entire function of controlling, or governing, the processes used by a group to accomplish some object...

CMIS 422 - Exam 1 With Verified Answers

CMIS-422 Practice Questions With Correct Answers...

Cryptography correct answers involves making and using codes to keep messages private and secure for their intended recipient Algorithm correct answers the math formula used to convert an unencrypted message into an encrypted message. Sometimes refers to the programs that enable the cryptographic process Bit stream cipher correct answers An encryption method that involves converting plaintext to ciphertext one bit at a time. Block Cipher correct answers An encryption method that involve...