GROUP 7 BLOCK A

These focus on controls needed to review, analyze, and appropriately prioritize the organization’s activities against ongoing security risks

• Control frameworks

• Program framework

• Risk frameworks

• Security Frameworks

is to present a higher-level view of the organization’s security efforts.

• Control frameworks

• Program framework

• Risk frameworks

• Security Frameworks

The foundation of all security programs – the specific controls and processes that help protect against threats.

• Control frameworks

• Program framework

• Risk frameworks

• Security Frameworks

Is a set of policies, guidelines, and best practices designed to manage an organization’s information security risks

• Control frameworks

• Program framework

• Risk frameworks

• Security Frameworks

Verifying the identity of users, devices, or applications trying to access resources.

• Confidentiality

• Integrity

• Availability

• Authentication

Determining what authenticated users are allowed to do and access.

• Confidentiality

• Authorization

• Availability

• Authentication

Ensuring that systems and data are accessible to authorized users when needed.

• Confidentiality

• Authorization

• Availability

• Authentication

Ensuring that sensitive information is accessible only to authorized individuals and systems

• Confidentiality

• Authorization

• Availability

• Authentication

Maintaining the accuracy and completeness of data and preventing unauthorized modification or deletion.

• Confidentiality

• Authorization

• Integrity

• Authentication

Providing irrefutable proof that a specific action or transaction occurred and that a particular party was responsible.

• Non-repudiation

• Authorization

• Integrity

• Authentication