Karteikarten
Risk Management Flash Card Pat I
Karten in diesem Stapel (54)
- 1CMSContent Management System
Web based app that supports collaboration between multiple content contributors - 2ERPEnterprise Resource Planning
Software that helps manage departments like HR payroll enterprise wide - 3CRMCUSTOMER RELATIONSHIP MANAGEMENT
FACILITATES INTERACTIONS WITH CUSTOMER SERVICE AND TECH SUPPORT - 4MSSPMANAGED SERVICE SECURITY PROVIDER
ORGANIZATIONS THAT PROVIDE SECURITY OUTSOURCING SOLUTIONS - 5HIPPASTANDARDS THAT HELP MANAGE HEALTH INFORMATION
- 6GLBA GRAMM-LEACH-BLILEY ACYGOVERNS FINANCIAL ORGANIZATIONS AND PROTECTS CONSUMERS PII
- 7SOX SARBANES OXLEY ACTAPPLIES TO PUBLICLY OWNED ORGANIZATIONS
CONDUCTS FRAUD ASSESSMENT - 8FISMASETS SECURITY STANDARDS FOR GOVT AGENCIES AND SYSTEMS
- 9PCI DSSREGULATIONS FOR CREDIT CARDS AND TRANSACTIONS
- 10GDPRPERSONAL DATA IN THE EU IS PROTECTED
- 11COBITCONTROL OBJECTIVES OF INFORMATION RELATED TECHNOLOGIES
BEST PRACTICES FOR IT MANAGEMENT - 12COPECOMPANY OWNED PERSONALLY ENABLED
COMPANY BUYS THE PHONE
USED FOR BUSINESS AND PERSONAL USE - 13CYODCHOOSE YOUR OWN DEVICE
YOU CAN PICK A DEVICE ON THE COMPANY'S LIST - 14LINUX COMMAND SUSWITCH USER
SWITCHES USER TO ROOT ACCOUNT - 15LINUX COMMAND SUDOALLOWS USER TO RU COMMANDS W/O PUTTING IN CREDENTIALS
- 16ORGANIZATION POLICIESUMBRELLA POLICY THAT INCORPORATES THE ENTIRE BUSINESS AS A WHOLE
- 17SYSTEM SPECIFIC POLICIESFOCUSES ON SPECIFIC COMPUTER OR NETWORK SYSTEM OR OS AND THE SECURITY CONTROLS THAT PROTECT THEM
- 18ISSUE SPECIFIC POLICIESPOLICIES THAT FOCUS ON A SINGLE BUSINESS ISSUE OR DEPARTMENT.
IE BUSINESS PRODUCTS AND PROCESSES - 19REGULATORY POLICIESPOLICIES THAT FOLLOW LEGAL REQUIREMENTS IN COMPLIANCE WITH THE LAW
- 20ADVISORY POLICYPROVIDE STRONG RECOMMENDATION TO THE BEHAVIOR OF EMPLOYEES
- 21INFORMATIVE POLICYREMINDERS OR THINGS WE HOPE EMPLOYEES CONSIDER
- 22DACDISCRETIONARY ACCESS CONTROL
OWNER GIVES PERMISSION AT HIS DESCRETION - 23RROLE BASED
- 24MACMANDATORY ACCESS CONTROL
NEED SOMETHING TO GET ACCESS.
IE CLEARANCE TO SEE SECRET FILES - 25RULE BASED ACCESS CONTROLRULES THAT APPLY TO ALL NOT JUST 1 USER.
IE ROUTER OR SWITCH RULE - 26CLEAN DESK POLICYKEEP SENSITIVE MATERIAL OFF YOUR DESK AND AWAY FROM PRYING EYES
- 27REMOTE ACCESS POLICYMANDATES HOW TO REMOTELY CONNECT SECURELY
- 28STANDARDSACCEPTED SPECS THAT PROVIDE SPECIFIC DETAILS ON AN OBJECTIVE
- 29PROCESSSERIES OF STEPS NEEDED TO ACHIEVE AN OBJECTIVE
- 30PROCEDURESSTEP BY STEP DETAILS ON HOW TO ACHIEVE A PROCESS
- 31RISK ASSESSMENTPROCESS OF DETERMINING THE PRIORITIZATION OF A RESPONSE TO THREATS
- 32BIABUSINESS IMPACT ANALYSIS
DOCUMENTS RISK AND THE IMPACT IF IT SHOULD HAPPEN
MUST RECOVER CRITICAL SERVICES WITHIN EXPECTED TIME LINES - 33IAINTEROPERABILITY AGREEMENT
AGREEMENTS THAT INCLUDE DATA, TECH, SHARING REQUIREMENTS
ISA
SLA
MOU
BPA - 34ISAINTERCONNECTION SECURITY AGREEMENT
AGREEMENT BETWEEN 2 ORGANIZATIONS THAT HAVE CONNECTED IT SYSTEMS.
DOCUMENTS SECURITY REQUIREMENTS - 35MOUMEMORANDUM OF UNDERSTANDING
AGREEMENT THAT EXPRESSES INTENDED ACTIONS BETWEEN 2 PARTIES
NOT BINDING
MIGHT HAVE COMMON GOALS - 36BPABUSINESS PARTNERSHIP AGREEMENT
ESTABLISHES TERMS, CONDITIONS, AND EXPECTANCY OF THE RELATIONSHIP - 37OLAOPERATING LEVEL AGREEMENT
INTERNAL DOCUMENT USUALLY BETWEEN 2 DEPARTMENTS TO SUPPORT ONE ANOTHER - 38MSAMASTER SERVICE AGREEMENT
BUILDING BLOCK FOR FUTURE AGREEMENTS - 39RFPREQUEST FOR PROPOSAL
INFORMS VENDOR OF PRODUCT BEING SOUGHT
WHAT SPECS THE ORGANIZATION WISHES TO BUY - 40RFQREQUEST FOR QUOTE
ASKS PRICE RANGE FOR SERVICES - 41RFIREQUEST FOR INFORMATION
USED TO GATHER INFORMATION ON PRODUCT BEING SOUGHT - 42(SLE) SINGLE LOSS EXPECTANCYASSET VALUE X EXPOSURE FACTOR
- 43ALE ANNUALIZED LOSS EXPECTANCYSLE X ARO
- 44RPNRISK PRIORITY NUMBER
SEVERITY X OCCURRENCE X DETECTION - 45ROIBENEFIT - COST /COST
- 46DECISION MAKING AUTHORITYBCP TEAM MADE UP OF BIG WIGS
- 47EMERGENCY RESPONSE TEAMIMMEDIATE COMMUNICATION PLAN. WHO WILL TAKE OVER IN DISASTERS
- 48RTORECOVERY TIME OBJECTIVE
PROFFERED TIME BUSINESS SHOULD BE RESTORED TO NORMAL FUNCTIONS - 49RPORECOVERY POINT OBJECTIVE
THE MAX TIME AN ORGANIZATION CAN TOLERATE A DATA LOSS - 50MTTRMEAN TIME TO REPAIR
HOW LONG TIL SOMETHING CAN BE RESTORED TO NORMAL - 51MTBFMEAN TIME BEFORE FAILURE
HOW LONG A DEVICE WILL LAST BEFORE FAILURE. LIFE SPAN - 52MTDMAX TOLERABLE DOWN TIME
MAX TIME A FUNCTION CAN BE UNAVAILABLE B4 IRRECOVERABLE BUSINESS FAILURE - 53KPIKEY PERFORMANCE INDICATORS
EVALUATES THE SUCCESS OF TECH GOALS AND PROCESSES - 54KRIMEASURES RISK AN ACTIVITY BRINGS
Informationen
- Beschreibung
- Der Nutzer hat seine Fachbereichs-Information gelöscht. Karteikarten am Risk Management Flash Card Pat I, erstellt von Gelöschter Nutzer am 04/02/2020.
- Erstellt von
- Gelöschter Nutzer
- Aufrufe
- 18
- Verlauf
-
- Erstellt von Matthew Campese · 4 Feb 2020
- Kopiert von Matthew Campese · 4 Feb 2020
- Bewertung