Asymmetric Encryption

An algorithm that uses one key to encrypt and a different key to decrypt the input plaintext.

Independent review and examination of records and activities to assess the adequacy of system controls, to ensure compliance with established policies and operational procedures. NIST SP 1800-15B

The act of identifying or verifying the eligibility of a station, originator, or individual to access specific categories of information.

The right or a permission that is granted to a system entity to access a system resource. NIST 800-82 Rev.2

Ensuring timely and reliable access to and use of information by authorized users.

A documented, lowest level of security configuration allowed by a standard or organization.

Biological characteristics of an individual, such as a fingerprint, hand geometry, voice, or iris patterns.

The most essential representation of data (zero or one) at Layer 1 of the Open Systems Interconnection (OSI) model.

Malicious code that acts like a remotely controlled “robot” for an attacker, with other Trojan and worm capabilities.

The loss of control, compromise, unauthorized disclosure, unauthorized acquisition or any similar occurrence where unauthorized access to personally identifiable information occurs. Source: NIST SP 800-53 Rev. 5

Broadcast transmission is a one-to-many (one-to-everyone) form of sending internet traffic.

Business Continuity (BC)

Actions, processes and tools for ensuring an organization can continue critical operations during a contingency.

Business Continuity Plan (BCP)

The documentation of a predetermined set of instructions or procedures that describe how an organization’s mission/business processes will be sustained during and after a significant disruption.

Business Impact Analysis (BIA)

An analysis of an information system’s requirements, functions, and interdependencies used to characterize system contingency requirements and priorities in the event of a significant disruption. NIST SP 800-34 Rev. 1

The byte is a unit of digital information that most commonly consists of eight bits.

A digit representing the sum of the correct digits in a piece of stored or transmitted digital data, against which later comparisons can be made to detect errors in the data.

The altered form of a plaintext message so it is unreadable for anyone except the intended recipients.

Classification identifies the degree of harm to the organization, its stakeholders or others that might result if an information asset is divulged to an unauthorized person, process or organization.

Classified or Sensitive Information

Information that has been determined to require protection against unauthorized disclosure and is marked to indicate its classified status and classification level when in documentary form.

A model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction. NIST 800-145

A system in which the cloud infrastructure is provisioned for exclusive use by a specific community of consumers from organizations that have shared concerns. NIST 800-145

The characteristic of data or information when it is not made available or disclosed to unauthorized persons or processes. NIST 800-66

Configuration Management

A process and discipline used to ensure that the only changes made to a system are those that have been authorized and validated.

Crime Prevention through Environmental Design (CPTED)

An architectural approach to the design of buildings and spaces that emphasizes passive features to reduce the likelihood of criminal activity.

A measure of the degree to which an organization depends on the information or information system for the success of a mission or of a business function. NIST SP 800-60 Vol. 1, Rev. 1

One who performs cryptanalysis, which is the study of mathematical techniques for attempting to defeat cryptographic techniques and/or information systems security.

The study or applications of methods to secure or protect the meaning and content of messages, files, or other information, usually by disguise, obscuration, or other transformations of that content and meaning.

The property that data has not been altered in an unauthorized manner. Data integrity covers data in storage, during processing and while in transit. Source: NIST SP 800-27 Rev A

Data Loss Prevention (DLP)

System capabilities designed to detect and prevent the unauthorized use and transmission of information.

The reverse process from encryption. It is the process of converting a ciphertext message back into plaintext through the use of the cryptographic algorithm and the appropriate key for decryption.

The opposite process of encapsulation, in which bundles of data are unpacked or revealed.

Information security strategy integrating people, technology, and operations capabilities to establish variable barriers across multiple layers and missions of the organization. Source: NIST SP 800-53 Rev 4

A technique of erasing data on disk or tape that ensures there is insufficient magnetic remanence to reconstruct data.

Denial-of-Service (DoS)

The prevention of authorized access to resources or the delaying of time-critical operations. Source: NIST SP 800-27 Rev A

The result of a cryptographic transformation of data which provides the services of origin authentication, data integrity, and signer non-repudiation. NIST SP 800-12 Rev. 1

Disaster Recovery (DR)

The activities necessary to restore IT and communications services to an organization during and after an outage, disruption or disturbance.

Disaster Recovery Plan (DRP)

The processes, policies and procedures related to preparing for recovery or continuation of an organization's critical business functions after a disaster.

Discretionary Access Control (DAC)

A certain amount of access control is left to the discretion of the object’s owner, or anyone else who is authorized to control the object’s access. NIST SP 800-192

Domain Name Service (DNS)

This acronym can be applied to three interrelated elements: a service, a physical server and a network protocol.

A network security device that monitors and filters incoming and outgoing network traffic based on an organization’s previously established security policies.

Intrusion Detection System (IDS)

A device or software application that monitors a network or systems for malicious activity or policy violations.

Virtual Private Network (VPN)

A technology that creates a safe and encrypted connection over a less secure network, such as the internet.

Information Security and IT Concepts Flashcards

Student preview

49 questions

Show all answers

1.

FLASHCARD QUESTION

Front

Adequate Security

Back

Security commensurate with the risk and the magnitude of harm resulting from the loss, misuse or unauthorized access to or modification of information. Source: OMB Circular A-130

2.

FLASHCARD QUESTION

Front

Administrative Controls

Back

Controls implemented through policy and procedures. Examples include access control processes and requiring multiple personnel to conduct a specific operation.

3.

FLASHCARD QUESTION

Front

Adverse Events

Back

Events with a negative consequence, such as system crashes, network packet floods, unauthorized use of system privileges, defacement of a web page or execution of malicious code that destroys data.

4.

FLASHCARD QUESTION

Front

Application Programming Interface (API)

Back

A set of routines, standards, protocols, and tools for building software applications to access a web-based software application or web tool.

5.

FLASHCARD QUESTION

Front

Application Server

Back

A computer responsible for hosting applications to user workstations. NIST SP 800-82 Rev.2

6.

FLASHCARD QUESTION

Front

Artificial Intelligence

Back

The ability of computers and robots to simulate human intelligence and behavior.

7.

FLASHCARD QUESTION

Front

Asset

Back

Anything of value that is owned by an organization, including tangible items like information systems and physical property, and intangible assets like intellectual property.

Create a free account and access millions of resources

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

46 questions

HGeo Unit 2 Test Review

Flashcard

•

9th Grade - University

47 questions

English-Kazakh Flashcards

Flashcard

•

KG

37 questions

Grade 11 CAT

Flashcard

•

11th Grade

37 questions

Untitled Flashcards

Flashcard

•

9th - 12th Grade

54 questions

Types of network vocab

Flashcard

•

9th - 12th Grade

35 questions

Motion in Two Dimensions

Flashcard

•

12th Grade

50 questions

English-Hebrew Flashcards

Flashcard

•

12th Grade

Popular Resources on Wayground

5 questions

This is not a...winter edition (Drawing game)

Quiz

•

1st - 5th Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

10 questions

Identify Iconic Christmas Movie Scenes

Interactive video

•

6th - 10th Grade

20 questions

Christmas Trivia

Quiz

•

6th - 8th Grade

18 questions

Kids Christmas Trivia

Quiz

•

KG - 5th Grade

11 questions

How well do you know your Christmas Characters?

Lesson

•

3rd Grade

14 questions

Christmas Trivia

Quiz

•

5th Grade

20 questions

How the Grinch Stole Christmas

Quiz

•

5th Grade

Discover more resources for Computers

28 questions

logos

Lesson

•

10th Grade

24 questions

CP1 - HTML Review

Quiz

•

9th Grade