Section 11.99 Standards

Question 1

Standards

Answer 1

Provides a framework for implementing security measures, ensuring that all aspects of an organisation’s security posture are addressed

Question 2

Password Standards

Answer 2

Define password complexity and management

■ Include length, character types, regular changes, and password reuse rules

■ Emphasise password hashing and salting for security

Question 3

Access Control Standards

Answer 3

Determine who has access to resources within an organization

Include access control models like:
● Discretionary Access Control (DAC)
● Mandatory Access Control (MAC)
● Role Based Access Control (RBAC)

■ Enforce principles of least privilege and separation of duties

Question 4

Physical Security Standards

Answer 4

Cover physical measures to protect assets and information

■ Include controls like perimeter security, surveillance systems, and access control mechanisms

■ Address environmental controls and secure areas for sensitive information

Question 5

Encryption Standards

Answer 5

Ensure data remains secure and unreadable even if accessed without authorisation

■ Include encryption algorithms like AES, RSA, and SHA-2

■ Depends on the use case and balance between security and performance