3.3.4 Procedures

Unless there are agreed policies and procedures governing how a system is protected then failures are possible.

• True

• False

With agreed policies and procedures governing how a system is protected in place failures are impossible.

• True

• False

Which 2 factors might cause the range of cyber security policies and procedures within an organisation to vary?

• Size of organisation

• Public key encryption

• Purpose of organisation

• Private key encryption

This document outlines the steps taken to recover data, IT systems and applications.

• Disaster recovery plan

• Acceptable use policy

• Digital signature acceptance policy

• Email policy

• Password protection policy

This document outlines how to use computer systems and security measures to obey when using company equipment.

• Disaster recovery plan

• Acceptable use policy

• Digital signature acceptance policy

• Email policy

• Password protection policy

This document outlines when and where an 'electronic autograph' is acceptable evidence of identity for documents.

• Disaster recovery plan

• Acceptable use policy

• Digital signature acceptance policy

• Email policy

• Password protection policy

This document outlines what is and is not considered appropriate use of electronic mail.

• Disaster recovery plan

• Acceptable use policy

• Digital signature acceptance policy

• Email policy

• Password protection policy

This document outlines what is acceptable in terms of Upper case, lower case, numbers and special characters when deciding upon the thing that goes with your user name.

• Disaster recovery plan

• Acceptable use policy

• Digital signature acceptance policy

• Email policy

• Password protection policy

_____ __________ refers to the processes and technologies used to control and monitor network access. 

• Access management

• Attack management

• Android management

• Advanced management

Removing or disabling user accounts when no longer required is part of what procedure or policy?

• Disaster recovery

• Access management

• Acceptable use

• Internet usage

• Email usage