COSC 4361 Chapter 8

1. A security blueprint is the outline of the more thorough security framework.

• True
• False

2 Separation of duties is the principle by which members of the organization can access the minimum amount of information for the minimum amount of time necessary to perform their required duties.

• True
• False

3. Lattice-based access control specifies the level of access each subject has to each object, if any.

• True
• False

4. Under the Clark-Wilson model, internal consistency means that the system is consistent with similar data in the outside world.

• True
• False

5. Information Technology Infrastructure Library provides guidance in the development and implementation of an organizational InfoSec governance structure.

• True
• False

6. In information security, a framework or security model customized to an organization, including implementation details is known as a floorplan.

• True
• False - blueprint

7. The information security principle that requires significant tasks to be split up so that more than one individual is required to complete them is called isolation of duties.

• True
• False - seperation

8. In information security, a specification of a model to be followed during the design, selection, and initial and ongoing implementation of all subsequent security controls is known as a blueprint.

• True
• False - framework

9. A security monitor is a conceptual piece of the system within the trusted computer base that manages access controls-in other words, it mediates all access to objects by subjects

• True
• False - reference

10. The Information Technology Infrastructure Library (ITIL) is a collection of policies and practices for managing the development and operation of IT infrastructures.

• True
• False - methods