Flashcards
Untitled
Cards in this deck (15)
- 1process of identifying and controlling risks facing an organizationRisk management
- 2process of examining an organization’s current information technology security situationRisk identification
- 3applying controls to reduce risks to an organization’s data and information systemsRisk control
- 4Communities of interest are responsible for:Evaluating the risk controls
Determining which control options are cost effective for the organization
Acquiring or installing the needed controls
Ensuring that the controls remain effective - 5Components of risk identificationPeople
Procedures
Data
Software
Hardware - 6The process must then be planned outPeriodic deliverables
Reviews
Presentations to management - 7begins with identification of assets, including all elements of an organization’s systemIterative process
- 8Important asset attributes:People
Procedures
Data - 9What information attributes to track depends on:Needs of organization/risk management efforts
Preferences/needs of the security and information technology communities - 10Asset attributes to be consideredname; IP address; MAC address; element type; serial number; manufacturer name; model/part number; software version; physical or logical location; controlling entity
- 11Specific avenues threat agents can exploit to attack an information asset are called vulnerabilitiesVulnerability Identification
- 12evaluates the relative risk for each vulnerabilityRisk Assessment
- 13The probability that a specific vulnerability will be the object of a successful attackLikelihood
- 14Risk DeterminationRisk EQUALS
Likelihood of vulnerability occurrence
TIMES value (or impact)
MINUS percentage risk already controlled
PLUS an element of uncertainty - 15—
Information
- Description
- Information Technology Flashcards on Untitled, created by Patrick Sy on 16/03/2018.
- Created by
- Patrick Sy
- Views
- 0
- Rating