Chapter 8 - Sustain - Training And Awareness

Question 1

What is the average cost of a data breach as of 2020

Answer 1

3.86 million dollars

Question 2

What are the top three industries in terms of financial impact of a data breach

Answer 2

1 healthcare (7 million)
2. Energy (6 million)
3. Financial services (5 million)

Question 3

What can be done to reduce the cost of a data breach

Answer 3

Have an information security and incident response team in place (can reduce costs by 2 million)

Question 4

What is the difference between training and awareness?

Answer 4

Training strives to produce relevant and
needed skills and competencies. Awareness focuses on a specific topic, such as security. Awareness is intended to allow individuals to recognize specific concerns, such as technology, and respond accordingly.6

Question 5

What is NIST SP 800-50

Answer 5

NIST SP 800-50, “Building an Information Technology Security Awareness and Training Program,”

Question 6

What are the 4 steps in the NIST 800-50 awareness and training life cycle

Answer 6

1. Awareness and training program design
2. Awareness and training material development
3. Program implantation
4. Post implementation