WorksheetsBusiness Processes - Lesson 2 - Info Security Req's
Total questions: 12
Worksheet time: 8mins
What is the JML procedure?
Joiner, Manager, Learner
Joiner, Mover, Learner
Joiner, Mover, Leaver
Joiner, Manager, Leaver
Which two of the following should occur at the Joiner stage?
Inclusion in security groups
Terminate access rights
Set-up managerial access to email account
Addition to contacts and mailing lists
Relinquish assets
Which three of the following should occur at the Leaver stage?
Inclusion in security groups
Terminate access rights
Set-up managerial access to email account
Addition to contacts and mailing lists
Relinquish assets
Which of the following best describes what should occur at the Mover stage?
Remove all existing access & grant new access
Remove unneeded existing access and grant new access
Remove all existing access
Grant new access
Remove unneeded existing access
Why is it important to make staff aware of security measures/procedures?
To help employees understand the organisation’s information and compliance risks, thus reducing the organisation’s exposure to security failures.
So that they can both proactively support security and when needed take correct action if breeches in security occur.
To help avoid virus infection and to handle an infection when it occurs.
All of these answers
How can you raise awareness of security measures with staff?
Online training (self paced)
Organised training based in a classroom
Regular security audits and monitoring
All of these answers
When training staff, which of the following policies should you aim to educate them on?
Acceptable Use Policy
Digital Rights management
Intellectual Property Rights
Disclosure of information
Reporting of Information security breaches
What piece of legislation makes it a criminal offence to ‘hack’ computer systems?
Human Rights Act (1998)
Data Protection Act (1998) and (2018)
Computer Misuse Act (1990)
All of these answers
What piece of legislation sets out our “right to respect for an individual’s private and family life”?
Human Rights Act (1998)
Data Protection Act (1998) and (2018)
Computer Misuse Act (1990)
All of these answers
Which of the following are key principles of the Data protection act?
Data shall be obtained only for one or more specified and lawful purposes
Data "freely" given by an individual can be used for any lawful purpose
Data shall be accurate and, where necessary, kept up to date
Data cannot be kept for longer than is necessary for that purpose or those purposes
Data shall be retained within the boundaries of the EU at all times
What does CIA stand for?
Confidentiality, Integrity, Availability
Clarity, Information, Access
Confidentiality, Information, Access
Clarity, Integrity, Availability
Confidentiality, Information, Availability
Which two of the following are Tunnelling protocols used to keep data confidential when transmitted?
PPTP
FTP
OpenDoc
OpenVPN
