Selecting Infrastructure Controls

Question 1

What is a Control?

Answer 1

A protective measure put in place to reduce potential risks and safeguard an organizations assets

Question 2

What is the Principle Of Least Privilege?

Answer 2

mandates that a user or system should only have the necessary access rights that they need to perform their duties.

Question 3

What is Defense in Depth?

Answer 3

emphasizes the use of multiple layers of security to mitigate threats even if one control fails,

Question 4

What is a Risk-Based Approach?

Answer 4

prioritization of controls based on the potential risks and vulnerabilities that are specific to your organization’s infrastructure.

Question 5

What is Lifecycle Management?

Answer 5

Regularly reviewing, updating, and retiring controls to adapt to evolving threat landscapes

Question 6

What is the Open Design Principle?

Answer 6

Ensuring transparency and accountability through rigorous testing and scrutiny of infrastructure and controls