IS4670 CHAPTER 13 TERMS & DEFINITIONS

Question 1

• An event with negative consequences, such a system crash, network packet floods, unauthorized use of system privileges, unauthorized access to sensitive data, and execution of malicious code that destroys data

Answer 1

Adverse event

Question 2

• A violation or an imminent threat of violation of computer security policies, acceptable use policies, or standard security practices.

Answer 2

Computer security incident

Question 3

• Any observable occurrence in a system or network. Examples include a user connecting to a file share, a server receiving a request for a Web page, a user sending e-mail, and a firewall blocking a connection attempt.

Answer 3

Event

Question 4

• A document that outlines specific procedures to follow in the event of a security incident.

Answer 4

Incident response plan

Question 5

• A group of people with responsibilities for dealing with any security incident in an organization

Answer 5

Incident response team (IRT)

Question 6

• Part of the National Cyber Security Division of the Department of Homeland Security that assists civilian agencies in their incident- handling efforts.

Answer 6

U.S. Computer Emergency Readiness Team (US-CERT)