Foundation of Cybersecurity Module 1

Question 1

What is Compliance?

Answer 1

is the process of adhering to internal standards and external regulations and enables organizations to avoid fines and security breaches.

Question 2

What are Security frameworks?

Answer 2

are guidelines used for building plans to help mitigate risks and threats to data and privacy.

Question 3

What are Security controls?

Answer 3

are safeguards designed to reduce specific security risks. They are used with security frameworks to establish a strong security posture.

Question 4

What is Security posture?

Answer 4

is an organization’s ability to manage its defense of critical assets and data and react to change. A strong security posture leads to lower risk for the organization.

Question 5

What is a Threat actor?

Answer 5

Any person or group who presents a security risk

Question 6

What is an Internal threat?

Answer 6

Can be a current or former employee, an external vendor, or a trusted partner who poses a security risk. At times, an internal threat is accidental. For example, an employee who accidentally clicks on a malicious email link would be considered an accidental threat. Other times, the internal threat actor intentionally engages in risky activities, such as unauthorized data access.

Question 7

What is Network security?

Answer 7

is the practice of keeping an organization’s network infrastructure secure from unauthorized access. This includes data, services, systems, and devices that are stored in an organization’s network.

Question 8

What is Cloud security?

Answer 8

Is the process of ensuring that assets stored in the cloud are properly configured, or set up correctly, and access to those assets is limited to authorized users. The cloud is a network made up of a collection of servers or computers that store resources and data in remote physical locations known as data centers that can be accessed via the internet. Cloud security is a growing subfield of cybersecurity that specifically focuses on the protection of data, applications, and infrastructure in the cloud.

Question 9

What is Persaonally Identifiable Information (PII)?

Answer 9

Any information used to infer and individual’s identity

Question 10

What is sensitive personally identifable information (SPII)?

Answer 10

A specific type of PII that falls under stricter handling guidelines

Question 11

What is identify theft?

Answer 11

Is the act of stealing personal information to commit fraud while impersonating a victim.

Question 12

Why security matters for a business?

Answer 12

Because ensures business continuity, prevent data loss or leaks that may affect reputation, increases financial growth and referrals.

Question 13

What is cybersecurity?

Answer 13

The practice of ensuring confidentiality, integrity, and availability of information by protecting networks, devices, people and data from unauthorized access or criminal exploitation.

Question 14

What is a threat?

Answer 14

A threat is any circumstance or event that can negatively impact assets