37 Security Policies

What is the main purpose of staff training in security policies?

• To reduce the number of employees

• To make staff aware of external threats

• To increase company profits

• To improve customer service

What does a disaster recovery plan outline?

• How to increase sales

• How to respond to cyber-attacks and natural disasters

• How to train new employees

• How to develop new software

What is the focus of the 'Before phase' in a disaster recovery plan?

• Responding to a disaster

• Preparing for a disaster

• Celebrating success

• Hiring new staff

What is the role of an Acceptable Use Policy in a school?

• To outline holiday schedules

• To provide rules for network use

• To list cafeteria menus

• To describe sports activities

What is the expectation of staff in terms of data use?

• To ignore data security

• To be more responsible with data

• To share data freely

• To delete all data

What is confidential computing?

• A method to store data in a public environment

• A technology for isolating sensitive data in a protected environment

• A way to share data openly

• A system for deleting data securely

What is the focus of protection in use?

• Encrypting data before storage

• Encrypting data during transmission

• Encrypting data while it’s being used in the RAM

• Encrypting data after deletion

What type of technology is confidential computing associated with?

• Cloud computing

• Local computing

• Distributed computing

• Quantum computing

Which protection method is used while data is in RAM?

• Protection at rest

• Protection in transit

• Protection in use

• Protection by deletion

What is the primary goal of protection at rest?

• To encrypt data before it is stored

• To encrypt data during transmission

• To encrypt data while in use

• To encrypt data after deletion