Business Processes - Lesson 2 - Info Security Req's

What is the JML procedure?

• Joiner, Manager, Learner

• Joiner, Mover, Learner

• Joiner, Mover, Leaver

• Joiner, Manager, Leaver

Which two of the following should occur at the Joiner stage?

• Inclusion in security groups

• Terminate access rights

• Set-up managerial access to email account

• Addition to contacts and mailing lists

• Relinquish assets

Which three of the following should occur at the Leaver stage?

• Inclusion in security groups

• Terminate access rights

• Set-up managerial access to email account

• Addition to contacts and mailing lists

• Relinquish assets

Which of the following best describes what should occur at the Mover stage?

• Remove all existing access & grant new access

• Remove unneeded existing access and grant new access

• Remove all existing access

• Grant new access

• Remove unneeded existing access

Why is it important to make staff aware of security measures/procedures?

• To help employees understand the organisation’s information and compliance risks, thus reducing the organisation’s exposure to security failures.

• So that they can both proactively support security and when needed take correct action if breeches in security occur.

• To help avoid virus infection and to handle an infection when it occurs.

• All of these answers

How can you raise awareness of security measures with staff?

• Online training (self paced)

• Organised training based in a classroom

• Regular security audits and monitoring

• All of these answers

When training staff, which of the following policies should you aim to educate them on?

• Acceptable Use Policy

• Digital Rights management

• Intellectual Property Rights

• Disclosure of information

• Reporting of Information security breaches

What piece of legislation makes it a criminal offence to ‘hack’ computer systems?

• Human Rights Act (1998)

• Data Protection Act (1998) and (2018)

• Computer Misuse Act (1990)

• All of these answers

What piece of legislation sets out our “right to respect for an individual’s private and family life”?

• Human Rights Act (1998)

• Data Protection Act (1998) and (2018)

• Computer Misuse Act (1990)

• All of these answers

Which of the following are key principles of the Data protection act?

• Data shall be obtained only for one or more specified and lawful purposes

• Data "freely" given by an individual can be used for any lawful purpose

• Data shall be accurate and, where necessary, kept up to date

• Data cannot be kept for longer than is necessary for that purpose or those purposes

• Data shall be retained within the boundaries of the EU at all times

Answer explanation

That 5 one is almost right, it states that data shall not be transferred out of the European Economic Area (EEA) not the European Union (EU)