Maintian a sec infra

Question 1

Governance

Answer 1

Strategic planning - provides organizational oversight setting policies and establishing practices to enforcement

Question 2

Compliance

Answer 2

Requirement that all parties follow the same rules

Question 3

Audit

Answer 3

Independent review and examination to assess the adequacy of controls to ensure compliance with policies and procedures

Question 4

Policies

Answer 4

Written direction everyone should follow
Specify correct/expected behaviour
-Enforcement and prove compliance to auditor
- Written and accessible

Question 5

Security Controls

Answer 5

Safeguards or countermeasures to avoid, detect, counteract, or minimize risks to assets

Question 6

ISO 27001:2013

Answer 6

Information Sec Management System Spec
Establishing security programs

Question 7

ISO 27002:2013

Answer 7

14 sec control groups
35 control objectives
>110 ind controls

Question 8

ISO 27005:2011

Answer 8

ISMS Risk Management

Question 9

NIST Computer Security Resources Center

Answer 9

Resources on computer, cyber.
Publication 800 series

Question 10

Industry-Sepecific Regulations

Answer 10

HIPAA Sec and Privacy - Protected Health Information
PCI DSS - Processing, storing and transmitting cardholder data
GDPR - Data protection from European Union

Question 11

NIST CSF

Answer 11

Cybersecurity Framework
-Identify, manage and assess cyberrisk
-Components:
1.Core. set of goals
2. Implementation Tiers. how to manage and operates
3. Profiles. List of requirements and resources
4 tiers

Question 12

CSF Core

Answer 12

• Set of cybersec activities
  -Translation layer among multi-disciplinary teams
• Functions
  1. Identify
  2. Protect
  3. Detect
  4. Respond
  5. Recover
  Forms the current Profile
  Current vs Target Profile provides roadmap to improvement

Question 13

NIST Functions

Answer 13

Identify. valuable assets
Protect. valuable assets from threats
Detect. when an event occurs
Respond. quickly and efficiently to a cyber incident
Recover. from an incident and get back to business

Question 14

NIST Functions - Identify

Answer 14

Assists in developing an organizational understanding in managing cybersecurity risk to systems, people, assets, data and capabilities.

Question 15

NIST Functions - Protect

Answer 15

outlines appropriate safeguards to ensure delivery of critical infrastructure services.

Question 16

NIST Functions - Detect

Answer 16

describes suitable actions to recognize the existence of a cybersecurity event. Identification of events.

Question 17

NIST Functions - Respond

Answer 17

includes appropriate activities to take action regarding a detected incident. ability to contain the impact of a potential incident.

Question 18

CIS Controls

Answer 18

top 20 activities for organizational security in order of priority
- Defense in depth
- Implementation groups (3)
a. Basic Controls
b. Foundational Controls
c. Organizational Controls

Question 19

CIS Benchmarks

Answer 19

guidelines to secure or lockdown OS, SW apps and networks

Question 20

CIS Basic Controls

Answer 20

Inventory and Control of HW
Inventory and Control of SW
Continuous Vulnerability Management
Controlled use of Administrative Privileges
Secure config for HW and SW on mobiles, laptops, workstations and servers
Maintenance, Monitoring and Analysis of Audit Logs

Question 21

CIS Foundational Controls

Answer 21

Email and Web Browser Protections
Malware Defenses / Endpoint
Firewall
Data Recovery Capabilities
Secure config for network devices
Boundary Defense
Data Protection
Controlled Access on the Need to Know
Wireless Access Control
Account Monitoring and Control

Question 22

CIS Organizational Controls

Answer 22

Security Awareness and Training
Application Software Security
Incident Response and Management
Penetration Tests and Red Team Exercises

Question 23

Vulnerability

Answer 23

Weakness in an finormation syste, system security procedures, internal controls or implementation that could be exploited or triggered by a threat. NIST

Question 24

Vulnerabiilty Management

Answer 24

Identification. Find a problem
> Where are vulnerabilities?
-Microsoft’s patch tuesday
-Vulnerability lists and databases (NIST NVD, MITRE CVE)
-Bug bounty programs
-Security assessments
Analysis. What to do?
Taking action. Implementing the decision
> Apply updates
- Zero-day vulnerabilities