Post-Assessment Chapter 12

The three fundamental objectives for information includes all of the following, except:

• Confidentiality

• Integrity

• Conformity

• Availability

This technique creates a fraudulent Website to mimic an actual, well-known Website run by another party

• Spoofing

• Phishing

• Spamming

• Pharming

An independent program code that replicates itself and eats away at data, uses up memory, and slows down processing

• Viruses

• Trojan Horse

• DOS

• Worm

Group of people that do politically motivated attacks on publicly accessible Web pages or e-mail servers.

• Hackers

• Disgruntled Insiders

• Criminal Groups

• Hacktivism

The following are the three widely recognized and best practice information security standards, except:

• COBIT

• ISO/IEC27002

• ERP

• NIST

These applications are computer programs that regularly provide reports in support of decision making and other organization activities.

• Order applications

• Production applications

• Social Media applications

• IS applications

______ refer to “weakness or exposures in IT assets or processes that may lead to a business risk or a security risk.”

• Strengths

• Threats

• Vulnerabilities

• Opportunities

This management includes virus protection, spam control, intrusion detection, and security event management.

• Trust

• Threat

• Vulnerability

• Identity

They are responsible for familiarizing themselves (and complying) with all policies, procedures, and standards dealing with information security.

• Third-party

• Users

• Information Custodian

• Information Owner

This policy must be coordinated with systems development, change control, disaster recovery, compliance, and human resource policies to ensure consistency.

• Risk Management

• Insurance

• Information Security

• Operations