ch12 Flashcards
what is the name of safeguards that involve vulnerabilities in hardware and software
technical safeguards
what is the name of where you put your digital encryption keys
key escrow
what are three sources of security threats
Malicious human activity
Human errors and mistakes
. Natural events and disasters
Pretexting
pretending to be someone else on the phone
Phishing
trying to be someone your not on a email
Spear Phishing
more personalized phishing
Spoofing
pretending to be someones elses IP and email
Sniffing
intercepting computer communications
Ransomware
making files unusable and then asking for money to give it back
what does PCI stand for
payment card Industry
what are the 7 since for security
- Not measuring network security
- Thinking compliance equals security
- Overlooking people such as employees
- Too much access for too many (and all access for
one!) - Lax patching procedures
- Lax logging and monitoring
- Spurning the KISS principle (KISS: Keep It Simple
for Security)
what are three safeguards
technical safeguards, data safeguards, human safeguards
what is PIPEDA
its the Personal Information Protection and Electronic Documents Act and it gives people the right to know why a organization gets there info
Biometric authentication
finger print or face ID
types of Malware
Viruses, worms, spyware, and adware.
what is spyware
its a program put on a users device without there concent and it monitors there activity
what is hardening
its taking steps in reducing the systems vulnerability and is a technical safeguard
what is a cold site
its office space and computers for a organization to use if they are hacked the slowest of the three
what is a hot site
its centers that are ready with equipment that companies might need if they loss there main assets the fastest of the three
what is a warm site
its a center that has some equipment and is a mix or both hot and cold so its in the middle of the three