Dictionary

Question 1

acceptable use policy

Answer 1

set of wording that describes an agreement between user and org that owns the service, application or device being accessed.

Usually defines both permitted and prohibited activities.

Question 2

access controls

Answer 2

rules and techniques used to manage and restrict entry to or exit from a physical, virtual or digital area through the use of permissions.

Permissions usually assigned to person, device or application service to ensure accountability and traceability of usage.

Secured using i) physical tokens; ii) secret information; iii) biometric information.

Question 3

Advanced Persistent Threats (APTs)

Answer 3

tenacious and highly evolved tactics used by hackers to infiltrate networks through digital devices and leave malicious software in place for as long as possible.

Purpose to steal or corrupt org’s digital data or to extort money or disrupt operations for financial gain, brand damage or other political purpose.

Harder and more costly to resolve the further into the lifecycle the attackers are.

Question 4

adware

Answer 4

software designed to render adverts to an end user. Considered malware if: i) advert was not consented to by user; ii) difficult to uninstall or remove; iii) provides other covert malware functions.

Question 5

air gap

Answer 5

use some form of physical and electronic separation to ensure activities in one area cannot impact or infect activities in another.

Physical and digital isolation of sensitive or infected systems, so no possibility of interacting with any other systems and networks.

Question 6

alert status

Answer 6

escalation flag assigned to security incident to indicate that it cannot be managed inside allowable time limits or other acceptable tolerances.