Flashcards
Cybersecurity Foundations
Flashcards do conjunto (28)
- 1Any weakness in a system, procedure or controlVulnerability
- 2Anything that can take advantage of a vulnerabilityThreat
- 3A measure of the likelihood and consequence of a threat materializingRisk
- 4The amount of risk an organization is willing to take to functionRisk Tolerance
- 5Safeguards, countermeasures or protection capability to avoid, detect, counteract, or minimize risksSecurity Controls
- 6Guidelines and security standards to protect government information and operationsFederal Information Security Modernization Act (FISMA)
- 7The US government agency that defines scientific and technical measurements and standardsNational Institute of Standards and Technology (NIST)
- 8DOS official policy manualForeign Affairs Manuals (FAM)
- 9DOS official procedures manualsForeign Affairs Handbooks (FAHs)
- 10Oversees an organization's information, cyber, and technology securityChief Information Security Officer (CISO)
- 11Strategy for managing information securityInformation Assurance
- 12Processes and tools used to protect information systemsInformation Security
- 13Unsanctioned use of IT resourcesShadow IT
- 14A technically sophisticated and well-funded adversaryAdvanced Persistent Threat (APT)
- 15An authorized user who knowingly or unknowingly uses their access to cause harmInsider Threat
- 16The process of assessing and prioritizing risks to information and associated systemsRisk Assessment
- 17The process of identifying, assessing, and minimizing the impact of riskRisk Management
- 18Implementing countermeasures to reduce riskRisk Mitigation
- 19Ensuring timely and reliable access to and use of informationAvailability
- 20Making the decision to allow someone to access a system or dataAuthorization
- 21An authentication system that requires more than one distinct authentication factor for successful authenticationMulti-Factor Authentication (MFA)
- 22Granting a person just enough permissions to do their job and no moreLeast Privilege
- 23Only granting access to information if a user needs it for their job"Need to Know"
- 24Protecting unclassified information from being compiled and used by an adversaryOperations Security (OPSEC)
- 25Maintaining data in its original state, without unauthorized modificationIntegrity
- 26Protecting data from unauthorized accessConfidentiality
- 27A security approach where trust is never assumed and access is constantly verifiedZero Trust
- 28The ability to prevent a user from denying they authored an electronic message or performed some kind of actionNon-repudiation
Informações
- Descrição
- Instructional Designer Cybersecurity Foundations FlashCards sobre Cybersecurity Foundations, criado por Emilie Gutierrez em 21-03-2024.
- Criado por
- Emilie Gutierrez
- Visualizações
- 12
- Tags
- Avaliação