P1L1 Security Mindset

Question 1

What is of value that you are trying to protect from attackers?

Answer 1

data

Question 2

What are the 2 kinds of companies?

Answer 2

1. Companies that have been hacked and know it

2. Companies that have been hacked and DON’T know it.

Question 3

Threat sources

Answer 3

Cyber criminals
Hacktivists
Nation States

Question 4

Vulnerabilities and attacks

Answer 4

compromises

security breach

Question 5

where are the vulnerabilities

Answer 5

software
networks
humans

Question 6

CIA

Answer 6

Confidentiality
Integrity
Availability

Question 7

Cyber attacks can have ________ consequences

Answer 7

physical

Question 8

What should the good guys do?

Answer 8

Prevention
Detection
Response
Recovery and remediation
policy vs mechanism

Question 9

Reduce vulnerabilities

Answer 9

Economy of mechanism–keep systems small and simple
Fail-safe defaults–means default access is denied
Complete mediation–no one should be able to bypass security measures
open design–no secrecy
Least privilege–minimum level of access needed
Psychological acceptability–don’t expect people to do what is inconvenient