MODULE 3 PRELIM Flashcards
________ is a critical process used across industries to identify, evaluate, and mitigate potential risks that could impact business operations, safety, and compliance.
Risk assessment
Common Risk Assessment Methodologies
- QUALITATIVE RISK ASSESSMENT
- QUANTITATIVE RISK ASSESSMENT
- FAILURE MODES AND EFFECTS ANALYSIS (FMEA)
- HAZARD AND OPERABILITY STUDY (HAZOP)
- BOWTIE ANALYSIS
TOOLS: SWOT ANALYSIS
A set of rules and procedures to protect organizational assets.
SECURITY POLICIES
Established guidelines and frameworks to ensure consistent security measures.
SECURITY STANDARDS
IMPORTANCE OF SECURITY POLICIES
- RISK MITIGATION
- COMPLIANCE
- TRUST
- INCIDENT MANAGEMENT
Reduces the likelihood of security breaches.
RISK MITIGATION
Ensures adherence to legal and industry regulations
COMPLIANCE
Builds confidence among stakeholders, clients, and employees.
TRUST
Facilitates efficient response and recovery from security incidents.
INCIDENT MANAGEMENT
KEY ELEMENTS OF SECURITY POLICIES
- ACCESS CONTROL
- DATA PROTECTION
- ACCEPTABLE USE
- INCIDENT RESPONSE
- TRAINING AND AWARENESS
- COMPLIANCE MONITORING
It refers to the framework, policies, and processes established to ensure the organization’s security objectives align with business goals.
INFORMATION SECURITY GOVERNANCE
IT IS A TYPE OF DATA THAT NEEDS A BIGGER SIZE OF STORAGE
UNSTRUCTURED DATA
IT IS A TYPE OF DATA THAT CAN BE TYPE AND NEED A SMALLER SIZE STORAGE
STUCTURED DATA
MODULE 3 CONCLUSION
GOOD GOVERNANCE IS THE FOUNDATION OF A SECURE FUTURE
