Unit 11 Topic D: Security Documentation

Within an IT security plan, each policy should include which of the following sections?

• Overview

• Scope

• Policy

• Enforcement

• Revision Tracking

Here, we need to designate the "who": the people in the organization that will be responsible for executing and enforcing the policy.

• Overview

• Scope

• Policy

• Enforcement

• Revision Tracking

This section outlines the "how" in detail: how your organization will govern.

• Overview

• Scope

• Policy

• Enforcement

• Revision Tracking

This will spell out the "what" and the "when": what the policy does and does not include and when it should be used.

• Overview

• Scope

• Policy

• Enforcement

• Revision Tracking

What is missing from the PDCA cycle?

• Check

• Choose

• Cheese

• Clone

Which of the following should make up part of an Incident Response Policy?

• Assembling the CSIRT

• Incident reporting procedure

• Initial assessment of the incident

• Ensuring that relevant external agencies are not informed

The core team responsible for dealing with IT security incidents and managing the impact in your organization

• CSIRT

• CSI MIAMI

• SWALK

• YMCA

Which members should a CSIRT include?

• IT Contact

• Management Representative

• Caretaker

• Receptionist

What should a Disaster Recover Policy include?

• Key personnel and DR team contact information

• A list of software and systems that will be used in the recovery

• Tips for dealing with the media

• Personal contact details of those involved

To develop an IT Disaster Recovery Plan, what should a business begin to compile?

• Inventory of hardware

• Identification of critical software

• Personal contact details of staff

• List of social media sites used by customers