Security Principles and Business Continuity Flashcard

Front

Which component of the CIA triad ensures data is accessible to authorized users when needed?

Back

Availability

Front

What is the primary purpose of encryption?

Back

Prevent unauthorized access to data

Front

Which framework is used for managing information security risks? Options: ISO 27001, PCI DSS, GDPR, HIPAA

Back

ISO 27001

Front

A policy requiring employees to use complex passwords aligns with: Least privilege, Defense in depth, Separation of duties, Acceptable use

Back

Defense in depth

Front

Non-repudiation ensures:

Back

A user cannot deny an action

Front

What is the goal of 'defense in depth'?

Back

Using multiple layers of security controls

Front

Which term refers to potential harm from a threat?

Back

Risk

Front

A security audit is an example of:

Back

Detective control

Front

Which regulation focuses on protecting healthcare data?

Back

HIPAA

Front

What does 'due diligence' mean in cybersecurity?

Back

Regularly assessing risks