IAS_1-Quiz No.3 (final term)

It is the identification of an organization's assets, followed by the development, documentation, and implementation of policies and procedures for protecting assets.

• Security Archtecture

• Operational Security

• Information Security

• Security Management

It is an important administrative security control designed to avoid, counteract or minimize IT security risks.

• Security Archtecture

• Operational Security

• Information Security Plocies and Procedures

• Security Management

What influenced the asset to put it at risk?

• Threat and Vulnerabilities

• Likelihood Impact

• Risk Impact

• Weaknesses

It addresses detected threats, correcting or reducing the impact of the threat and removing it from the system.

• Threat Detection

• Remediation

• Prevention

• Implementation

These strategies aim to reduce the likelihood of a successful cyber attack by identifying and eliminating security weaknesses within the system, it focuses on blocking threats before they can execute, rather than responding to incidents after they have already occurred.

• Threat Detection

• Remediation

• Prevention

• Implementation

It is the practice of monitoring an organization's security ecosystem to quickly identify any malicious activity within the networks.

• Threat Detection

• Threat Remediation

• Threat Prevention

• Threat Implementation Plan

It is a comprehensive statement made by the company’s senior management, indicating the role of security in the organization, and it must be independent in terms of technology and solutions.

• Standards

• Policy

• Procedures

• Guielines

It is the uniform way of implementing a given safeguard and the system must meet the baseline described by benchmarks.

• Standards

• Baselines

• Procedures

• Guielines

It describes the recommended actions and operating instructions for users, IT professionals, and other staff members when the appropriate Standards do not apply.

• Standards

• Baselines

• Procedures

• Guielines

It is the detailed step-by-step descriptions of tasks performed to achieve a certain goal. Steps can be performed by users, IT professionals, security personnel, and other staff members dealing with specific tasks.

• Standards

• Baselines

• Procedures

• Guielines