Cyber Security Plan

Which of the following are sections of a cyber security plan?

• Threat(s) addressed by the protection measure

• Justification of technical responsibilities

• Outline cost-benefit

• Overview of usability constraints

Which of the following might hardware firewalls be used for?

• Detecting malware that has infected a computer.

• Scanning ports to see what are open for data to pass through.

• Filtering website to prevent accidentally infecting a computer from a web page with malicious code.

• Packet filtering to prevent Denial of Service attacks.

If an organisation uses mobile devices, how might they secure these devices from theft?

• Hardware Firewall

• Locked Cabinets

• Alarm System

• Access Rights

Port scanning can detect open ports that might be a vulnerability in the system.

• True

• False

Which of the following are good techniques for mitigating the level of impact should a malicious user gain access to data?

• Access Rights

• Network Segmentation

• Anti-Malware

• Wireless Access Points

All threats must be protected against, even if they are identified as being low risk.

• True

• False

Which of the following are examples of technical or financial constraints?

• Specialist skills needed to perform tasks.

• The hardware and software available.

• The legislation that must be adhered to.

• The performance of the system.

What legal responsibility might be affected by the decision to encrypt all data transmitted over the internet.

• Data Protection Act

• Telecommunications (Lawful Business Practice) (Interception of Communications) Regulations

• Computer Misuse Act

• Health & Safety at Work Act

The “Usability of the System” section is only concerned with how easy-to-use any new security features are for end users

• True

• False

The costs of a protection measure must outweigh the benefits.

• True

• False