Karteikarten
Ohne Titel
Karten in diesem Stapel (12)
- 1Core PrinciplesConfidentiality
Integrity
Availability - 2Core Principles Meaning- Confidentiality - users with access can use the system and data
- Integrity - Authorized modifications to system and data
- Availability - Systems must be available when they are supposed to be - 3Quantitative assessments- Precise and measurable
- Allow a specific dollar amount for a specific risk - 4Qualitative assessments- Educated guesses
- Flexible : risk of "High, Medium, or Low" - 5AV - EF SLE - ARO ALEAsses Value - Percentage value of an asset
Single Loss expectancy - Annualized Rate of occurrence
Annualized Loss expectancy - 6Three Basic Elements of Risk 1 other importantAssets
Threats
Vulnerabilities
Exploit ; ) - 7Assets Threats VulnerabilitiesOwned by an individual or corp
Any circumstance that could harm
Weakness in system design - 8ECC Risk ManagementRisk Identification
Risk assessment
Risk treatment
Risk tracking
Risk review - 9Risk AssessmentIt is Quantitative
1 - Single Loss Expectancy (SLE)
2 - Annual Rate of occurrence (ARO)
3 - Annual loss expectancy (ALE) - 10Threat Modeling 5 stepsDefining Security requirements
Creating an application diagram
Identifying Threats
Mitigating threats
Validating that threats have been mitigated - 11Security AssessmentsHigh-level assessments = Level 1
- 12High-level assessments = Level 1 Network = Level 2Top-down look at the organization's policies procedures
Informationen
- Beschreibung
- Cyber Security Karteikarten am Ohne Titel, erstellt von Kura Kura am 06/10/2023.
- Erstellt von
- Kura Kura
- Aufrufe
- 2
- Bewertung