Terms To Know Flashcards
What is CCPA
California Consumer Privacy Act: passed to give california consumers rights regarding their data, like the right to opt out of sale of their information
What is NYDFS
Regulation that ensures all financial institutions in new york adhere to key quirements like limiting access privileges
GDPR
General Data Protection Regulation: protect data of EU consumers
AI
Artifical intelligence - simulation of human intelligence by computer systems: predictive analytics
TDLC
Technology development life cycle is the systematic approach to manage tech related projects
- initiation
- planning
- design
- development
- testing
- deployment
- maintenance
- closure
Github
Web-based platform that provides version control
IBM AppScan
Application security testing tool to help identify and remediate vulnerabilities
Linux
Operating system that is open source
VI Editor
Text editor that provides a command-line interface for editing text files directly in terminal (for all unix like OS like Linux)
Risk Assessment
A process to identify and prioritize risks within the tech environment
ISO
International Standards Org: comprised of international representatives that help develop international standards like ISO/IEC 27001 which specifies requirements for protecting sensitive info
SOX
Sarbanes-Oxley Act of 2002: requires publicly traded companies to ensure their internal business processes are properly managed
OWASP TOP 10
List of top 10 most critical security risks to web applications
NIST
National Institute of Standards and Technology - a cybersecurity framework that can improve cyber posture at an organization. Core functions: identify, protect, detect, respond, recover
What is a risk?
The potential for loss or harm resulting from threats and vulnerabilities
What is a threat?
An event that can exploit vulnerabilities like malware (malicious software)
What is a vulnerability?
A weakness in the system that can be exploited by a threat
What is private data, public data, secret data?
Private: sensitive data that is intended to be kept confidential like employee personnel files
Public: freely accessible data that doesnt require access like stock market prices
Secret: highly confidential data that is restricted that can damage business interests like trade secrets
Explain the difference between likelihood and impact as pertaining to risks
Likelihood refers to the chance that risk event will occur
Impact refers to the severity if the risk were to be realized; assesses potential harm, loss, or damage (financial, reputational, or regulatory impact)
Examples of regulatory frameworks
Basel Accords: international framework for banking with one focus being strengthen risk mgmt practices of banks
Dodd-Frank Wall Street Reform and Consumer Protection Act: put in place to prevent another recession, requires large financial institutions to undergo stress tests
CCPA
GDPR
COBIT
Control Objectives for Information and Related Technologies: framework that helps companies improve IT governance
