Domain 2 Flashcards
Breach
The loss of control, compromise, unauthorized disclosure, unauthorized acquisition or any similar occurrence where colon a person other than an authorized user accesses or potentially accesses personally identifiable information
Business continuity
Actions processes and tools for ensuring an organization can continue critical operations during
Business continuity plan or BCP
The documentation of a predetermined set of instructions or procedures that describe how an organization’s mission/business processes will be sustained during and after a significant disruption
Business impact analysis or
An analysis of an information systems requirements, functions, and interdependencies used to characterize system contingency requirements and priorities in the event of a significant description
Disaster Recovery or Dr
An information systems terms the activities necessary to restore it and communication services to an organization during an after an outage, disruption or disturbance of any kind or scale
Disaster Recovery plan or DRP
The processes policies and procedures related to preparing for Recovery or continuation of an organization’s critical business functions technology infrastructure systems and applications after the organization experiences a disaster
Event
Any observable occurrence in a network or system
Exploit
A particular attack. It is named this way because these attacks exploit system vulnerabilities.
Incident
An event that actually or potentially jeopardizes the confidentiality Integrity or availability of an information system
Incident handling or incident response IR
The process of detecting and analyzing incidents to limit the incidence effect
Incident response plan or IRP
The documentation of a predetermined set of instructions or procedures to detect, respond to and limit consequences of a malicious Cyber attack against an organization’s Information Systems
Intrusion
A security event or a combination of security events that constitutes a security incident in which an intruder gains or attempts to gain, access to a system or system resource without authorization
Security operations center
A centralized organizational function fulfilled by an information security team that monitors detects and analyzes events on the network or system to prevent and resolve issues before they result in business disruptions
Vulnerability
Weakness in an information system system security procedures, internal controls or implementation that could be exploited or triggered by a threat source.
Zero day
A previously unknown system vulnerability with the potential of exploitation without risk of detection or prevention because it does not, in general, fit recognize patterns, signatures or methods
