DIS Revision 1

The protection afforded to an automated information system in order to attain the applicable objectives of preserving the integrity, availability, and confidentiality of information system resources (includes hardware, software, firmware, information/data, and telecommunications).

• firewall

• computer security

• antivirus

• computer communication

CIA triad concepts ............

• Continuous

  Integrity

  Availability

• Confidentiality

  Internet

  Availability

• Confidentiality

  Integrity

  Accountability

• Confidentiality

  Integrity

  Availability

Assures that private or confidential information is not made available or disclosed to unauthorized individuals.

• Data confidentiality

• Data privacy

• Data collection

• Data protect

Guarding against improper information modification or destruction, including ensuring information nonrepudiation and authenticity.

• confidentiality

• availability

• integrity

• modify

A flaw or weakness in a system’s design or operation violate the system’s security policy is known as _________

• risk

• asset

• vulnerability

• integrity

An expectation of loss expressed as the probability that a particular threat will exploit a particular vulnerability with a particular harmful result.

• asset

• attack

• risk

• measure

A set of rules and practices that specify or regulate how a system or organization provides security services to protect sensitive and critical system resources.

• protocol

• layer network

• resource ledger

• Security Policy

A potential for violation of security, which exists when there is a circumstance, capability, action, or event, that could breach security and cause harm.

• asset

• risk

• countermeasure

• threat

An attempt to alter system resources or affect their operation is an _________ attack.

• active

• passive

• minor

• major

An attempt to learn or make use of information from the system that does not affect system resources.

• active

• passive

• threat

• risk