6.4 - 6.6 - Protection measures, physical and logical protection

Question 1

Placing computers above known flood levels

Answer 1

For example, on the top floors of buildings.

Question 2

Access rights to information

Answer 2

Which staff can access which files

Question 3

Policy

Answer 3

A set of ideas or a plan of what to do in particular situations that has been agreed to officially by a group of people

Question 4

Responsibilities of staff for security of information

Answer 4

Individual staff maintaining security for data in their area, allows for more focused security.

Question 5

Disaster recovery

Answer 5

A documented procedure that should be followed to recover and protect the IT infrastructure in an organisation.

Question 6

Information security risk assessment

Answer 6

Used to identify, estimate and prioritise risks to organisations resulting from the operation and use of information systems.

Question 7

Evaluation of effectiveness of protection measures

Answer 7

Process of reviewing the measures in place to ensure they are fit for purpose.

Question 8

Training of staff to handle information

Answer 8

For example, not divulging information to unauthorised people, logging out of systems when not in use, preventing unauthorised people from seeing the computer screen.

Question 9

Biometrics

Answer 9

The identification of a user based on a physical characteristic, such as a fingerprint, iris, face or voice.

Question 10

Firewall

Answer 10

A form of network security that monitors traffic into and out of a network.

Question 11

Locks, keypads and biometrics

Answer 11

Access to doors, workstations server rooms can be physically stopped by locking screens via the keypad or putting padlocks on machines.

Question 12

Physical protection

Answer 12

Refers to the protection of locations and equipment from theft, vandalism, natural disasters , man-made catastrophes and accidental damage.

Question 13

Back up systems in other locations

Answer 13

Storing back ups alternative areas to where the information is normally used - different sites, cloud storage.

Question 14

Security staff

Answer 14

Monitor buildings and prevent unauthorised access.

Question 15

Shredding paper based records

Answer 15

These are almost impossible to rebuild therefore information that was stored on them will be unable to be used.

Question 16

Logical protection

Answer 16

Uses digital/software-based methods to protect data.

Question 17

Tiered levels of access to data

Answer 17

The process of making certain information only accessible to certain staff.

Question 18

Anti-malware applications

Answer 18

Any software that protects a computer from malware eg anti-virus, spyware, pop up blockers.

Question 19

Obfuscation

Answer 19

Purposely making something unintelligible so that it can’t be understood.

Question 20

Data at rest

Answer 20

Data that is being stored on digital media while it is not being transferred between devices.

Question 21

Data in transit

Answer 21

Data that is moving from one location to another eg across the internet or a network.

Question 22

Encryption

Answer 22

Converting data from a readable format to an encoded version.

Question 23

Decryption

Answer 23

A process that reverses encryption, taking a secret message and reproducing the original plain text