Domain 1 - part 2

Question 1

composite of various standards regulations and statutory requirements from around the world. covering a variety of subjects related to IT and data security.

Answer 1

CSA star cloud security

Question 2

global/worldwide Focused on policy and controls recognized globally. Know for information security management system.

Answer 2

ISO 27001/2 - -Security control framework - 27001 I S M S policy and 02 controls

Question 3

Best practices managed by A l e x o s British government and a private firm. How an org IT e n v should enhance and benefit its business goals. Mapped to I S O 20000 standard

Answer 3

I TIL

Question 4

realm of the security practitioner security controls are applied

Answer 4

Mitigate

Question 5

Business decision not a security practice. Usually made by senior management

Answer 5

Avoid

Question 6

converse of avoidance, management may opt for conducting the business function that is associated with the risk without any further action on the org part.

Answer 6

Accept

Question 7

the practice of paying another party accept full financial impact of the harm

Answer 7

Transfer-Risk Response

Question 8

formula to calculate SLE

Answer 8

S LE=(AV)(E F) s l eave + f

Question 9

formula to calculate ALE

Answer 9

ALE=(S LA)(A R O)

Question 10

mitigate - controls that mitigate the effects or risks of the loss of the primary controls. physical locks that still function if an electronic access control system loses power, or personnel trained to use fire extinguishers hoses in the event a sprinkler system does not activate

Answer 10

compensate

Question 11

remediation - controls that react to a situation in order to perform remediation or restoration. Include fire suppression systems, intrusion prevention systems, and incident response teams. Tape backups

Answer 11

corrective

Question 12

recognize - controls that recognize hostile or anomalous activity. These can include motion sensors, guards, dogs, and intrusion detection systems.

Answer 12

detective

Question 13

reduce - controls that reduce the likelihood someone will choose to perform a certain activity. These can include notification, cameras, and noticeable presence of other controls.

Answer 13

deterrent

Question 14

Mandates - controls that impose mandates or requirements. can include policies, standards, signage, or notification, and are often combined with training.

Answer 14

directive

Question 15

prohibit - Controls that prohibits a certain activity. Walls and fences they prohibit people from entering an area in an unauthorized manner.

Answer 15

preventive

Question 16

restoration - designed to restore operations to a known condition following a security incident. Can include backups and disaster recovery plans

Answer 16

recovery