ENUMERATION

Question 1

PHASES IN THE SECURITY SYSTEMS DEVELOPMENT LIFE CYCLE

Answer 1

Initiation Phase
System Concept Development Phase
Design Phase
Development Phase
Implementation Phase
Operations and Maintenance Phase
Disposition Phase

Question 2

THREATS THAT CAN COMPROMISE INFORMATION SECURITY

Answer 2

Cyberattacks
Data breaches
Physical security incidents

Question 3

COMMON TYPES OF ATTACKS

Answer 3

Cyberattacks (hacking, malware, data breaches)
Insider Threats
Phishing
Ddos Attacks
Ransomware
Sql injection
Buffer overflow

Question 4

EXAMPLES OF SECURITY CONTROLS

Answer 4

Administrative controls (Security Policies and Procedures)
Physical Controls (Access Control)
Technical Controls (encryption, firewall, intrusion detection systems, access control protocols)
Incident Report Controls (Incident Report Plans)
Compliance Controls (regulatory Compliance Measures, GDPR, HIPAA)

Question 5

THE IMPORTANCE OF INFORMATION

Answer 5

Information is valuable therefore, Information Systems are valuable, and compromising Information Security Services (C-I-A) have real consequences (loss).

Question 6

THE CIA TRIAD

Answer 6

Confidentiality
Integrity
Availability