Security assurance

Which of the one is not an assurance component as per CESG?

• Implementation assurance
• Intrinsic Assurance
• Internal Assurance
• None

Which assurance component involves assurance justification?

• Implementation assurance
• Operational Assurance
• Intrinsic Assurance
• Extrinsic Assurance

It is a testing where the tester knows very little about the business, what information they infrastructure has been configured. Which tetsing is this?

• GreyBox Testing
• Blackbox Testing
• Whitebox testing

Security Testing is an automated review against known vulnerabilities to identify security flaws, bugs in the code, default credentials, and whether any loopholes (or back doors) can be used to access information without authorization

• True
• False

Supply chain assurance will come under:

• Implementation assurance
• Operational Assurance
• Intrinsic Assurance
• Extrinsic Assurance

Ultimate aim of security assurance is:

• To counter cyber fraud
• To gain insight into the degree to which implementd and operational system meets its security requirements
• To develop a security policy
• To Eliminate risk of security breach