LO6 Security & Protection

Question 1

What are the three main principles of InfoSec?

Answer 1

Confidentiality.
Integrity.
Availability.

Question 2

Name the different risks to data?

Answer 2

Unauthorized Access to Data.
Accidental Loss of Data.
Intentional Destruction of Data.
Intentional Tampering with Data.

Question 3

Name the Impacts of a risk to data?

Answer 3

Loss of Intellectual Property
Loss of Service and Acess
Failure in Security of Confidential Information
Loss of Information belonging to a third party
Loss of reputation
The threat to National Security.

Question 4

Name Different Protection Policies

Answer 4

Staff Responsibilities:
Let the staff know their roles within a data breach as well as providing data security techniques and should be trained to know how to adequately handle information.
Disaster & Recovery Planning:
Risks need to be analyzed.
Staff Response.
Recovery measures.
Assessment and Effectiveness.
Risks assessments and training drills should occur.

Question 5

Name 6 Physical Protection Methods

Answer 5

Flood Levels
Lock & Keypads
Biometrics
Shredding 
Security Staff
Backups

Question 6

Name 6 Logical Protection Methods

Answer 6

Password Protection
Anti-malware
Tiered Levels of Acess
Firewall
Encryption
Obfuscation