Info Assurance reviewer

MULTICS

• Multi-User Time Sharing System
• Multiplexed Information and Computing Service
• Multiplexed Information and Communication System
• Multimedia Information and Computing Service

“The quality or state of being secure—to be free from danger”

• Safety
• Security
• Protection
• Defense

The protection of information and its critical elements, including systems

and hardware that use, store, and transmit that information

• Software protection
• Network security
• Data management
• security

is entire set of components necessary to use

information as a resource in the organization

• Information system
• Database management system
• Knowledge base
• Data warehouse

Methodology for design and implementation of information system

• Systems Development Life Cycle (SDLC)

• Data analysis
• User training
• System decommissioning

A tool that security professionals can use to understand attacks is the ________ Web site hosted by

Mitre—a nonprofit research and development organization sponsored by the U.S.

government.

• Common Attack Pattern Enumeration and Classification (CAPEC)

• CVE Database
• OWASP Top Ten
• SANS Institute

The unauthorized duplication, installation, or distribution of copyrighted

computer software, which is a violation of intellectual property.

• Software sharing
• Software distribution
• Software licensing
• Software piracy

A number of technical mechanisms—digital watermarks, embedded code,

copyright codes, and even the intentional placement of bad sectors on software

media—have been used to enforce copyright laws.

• Copyright Protection and User Registration

• Digital signatures
• Encryption keys
• License agreements

In organizations that rely heavily on the Internet and the World Wide Web to

support continued operations, ______ can considerably undermine the

availability of information.

• system updates
• data breaches
• Internet Service Issues

• network maintenance

Other utility services can affect organizations as well. Among these are telephone,

water, wastewater, trash pickup, cable television, natural or propane gas, and

custodial services. The loss of these services can impair the ability of an

organization to function.

• Utility services are always reliable.
• Loss of utility services has no impact on organizations.
• Organizations thrive without any utility services.
• Communications and Other Provider Issues