Policy & Law Flashcards
1
Q
Define Policy
A
Set of actions the government should take in order to reach its desired outcome; goals
2
Q
Define Law
A
Constitutional, statutory, and regulatory authorities set for accomplishing the goals of a policy, as well as setting limitations; requirements
3
Q
Computer Fraud and Abuse Act (CFAA)
A
- Primary federal anti-hacking law
4
Q
Digital Millennium Copyright Act (DCMA)
A
- Prevents making copies of copyright work
- Prevents researcher and good hackers (aka penetration testers) from finding vulnerabilities before bad hackers
5
Q
Posse Comitatus Act
A
- Prohibits use of military to enforce domestic civilian laws
6
Q
Section 5 of Federal Trade Commission Act
A
- Prohibits unfair and deceptive trade practices
* Includes poor or misrepresented data security
7
Q
Agencies responsible for Cyber Security
A
- Dept. of Justice
- Dept. of Homeland Security
- Dept. of Defense
8
Q
NIST Framework (5 aspects) DRRIP
A
- Detect
- Respond
- Recover
- Identify
- rProtect