Cyber Security Flashcards

1
Q

What does CIA stand for?

A

Confidentiality, Integrity, Availability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the CIA triad?

A

A foundational model that helps us inform how organizations consider risk when setting up systems and security policies.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Define Confidentiality

A

Only authorized users can access specific assets or data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Define Integrity

A

Data is correct, authentic and reliable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Define Availability

A

Data is accessible to those who are authorized to access it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Asset

A

An item perceived as having value to an organization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is NIST Cybersecurity Framework (CSF)

A

A voluntary framework that consists of standards, guidelines, and best practices to manage cybersecurity risk.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Define: Security Lifecycle

A

A constantly evolving set of policies and standards

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Define: Security Controls

A

Safeguards designed to reduce SPECIFIC security risks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Define: Security Frameworks

A

Guidelines used for building plans to help mitigate risks and threats to data and privacy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the 4 core components of Security Frameworks?

A
  1. Idenity and document security goals
  2. Setting guidelines to achieve security goals
    3.Implementing strangers security processes.
  3. Monitoring and communicating results
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

FERC-NERC

A

Federal Energy Regulatory Commission - North American Electric Reliability Corporation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

FedRAMP

A

Federal Risk and Authorization Management Program (Cloud Work)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

CIS

A

Center for Internet Security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

GDPR

A

General Data Protection Regulation (European Union)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

PCI DSS

A

Payment Card Industry Data Security Standard (for reduction of CC Fraud)

17
Q

HIPAA

A

Health Insurance Portability and Accountability Act

18
Q

What 3 rules govern HIPAA?

A

Privacy, Security, Breach Notification

19
Q

HITRUST

A

Health Information Trust Alliance (A framework for ensuring HIPAA laws are met)

20
Q

Executive Order 14028

A

On May 12, 2021, President Joe Biden released an executive order related to improving the nation’s cybersecurity to remediate the increase in threat actor activity

21
Q

Security Governance

A

Practices that help support, design and direct security efforts of an organization