Course 2- Play It Safe: Manage Security Risks Flashcards
What does ‘Assess’ mean in the NIST RMF?
The fifth step of the NIST RMF that means to determine if established controls are implemented correctly.
What does ‘Authorize’ refer to in the NIST RMF?
The sixth step of the NIST RMF that refers to being accountable for the security and privacy risks that may exist in an organization.
What is ‘Business continuity’?
An organization’s ability to maintain their everyday productivity by establishing risk disaster recovery plans.
What is the purpose of ‘Categorize’ in the NIST RMF?
The second step of the NIST RMF that is used to develop risk management processes and tasks.
What is an ‘External threat’?
Anything outside the organization that has the potential to harm organizational assets.
What does ‘Implement’ mean in the NIST RMF?
The fourth step of the NIST RMF that means to implement security and privacy plans for an organization.
What is an ‘Internal threat’?
A current or former employee, external vendor, or trusted partner who poses a security risk.
What does ‘Monitor’ entail in the NIST RMF?
The seventh step of the NIST RMF that means be aware of how systems are operating.
What is the ‘Prepare’ step in the NIST RMF?
The first step of the NIST RMF related to activities that are necessary to manage security and privacy risks before a breach occurs.
What is ‘Ransomware’?
A malicious attack where threat actors encrypt an organization’s data and demand payment to restore access.
What does ‘Risk’ refer to?
Anything that can impact the confidentiality, integrity, or availability of an asset.
What is ‘Risk mitigation’?
The process of having the right procedures and rules in place to quickly reduce the impact of a risk like a breach.
What is meant by ‘Security posture’?
An organization’s ability to manage its defense of critical assets and data and react to change.
What does ‘Select’ mean in the NIST RMF?
The third step of the NIST RMF that means to choose, customize, and capture documentation of the controls that protect an organization.
What is ‘Shared responsibility’?
The idea that all individuals within an organization take an active role in lowering risk and maintaining both physical and virtual security.
What is ‘Social engineering’?
A manipulation technique that exploits human error to gain private information, access, or valuables.
What is a ‘Vulnerability’?
A weakness that can be exploited by a threat.
What is an Asset?
An item perceived as having value to an organization
What are Attack vectors?
The pathways attackers use to penetrate security defenses
What is Authentication?
The process of verifying who someone is
What is Authorization?
The concept of granting access to specific resources in a system
What is Availability?
The idea that data is accessible to those who are authorized to access it
What are Biometrics?
The unique physical characteristics that can be used to verify a person’s identity
What is Confidentiality?
The idea that only authorized users can access specific assets or data
