Flashcard on Information Security Management

Front

What is the principle of least privilege?

Back

Access to the minimum amount of information for the minimum amount of time

Front

What does the need-to-know principle entail?

Back

Access limited to specific information required for a task

Front

What is the purpose of separation of duties?

Back

To split significant tasks among multiple individuals

Front

Which of the following is a directive control?
Options:
Firewalls
Video monitoring signs
Strong authentication requirements
An appropriate use policy

Back

An appropriate use policy

Front

What type of controls are managerial controls?

Back

Controls designed by strategic planners

Front

What does mandatory access control imply?

Back

Access is determined by a central authority.

Front

What is the highest level of classification in the U.S. government?

Back

Top Secret

Front

What is a clean desk policy?

Back

A policy requiring secure storage of information.

Front

What does lattice-based access control involve?

Back

A matrix of authorizations for access

Front

What are nondiscretionary controls based on?

Back

Central authority and roles