Strategic infrastructure security ch 2
About this set
Created by:
berevan on February 8, 2012
Subjects:
Strategic infrastructure security
Description:
ch 2 def
Log in to favorite or report as inappropriate.
Order by
19 terms
Terms | Definitions |
|---|---|
 Acceptable use policy | A policy that establishes what constitutes acceptable use of company resources and offers specifics on what's considered unacceptable use. |
| auditing | The process of reviewing records of network computers' activities; these records include who is connecting to a computer, what resources are being requested, and whether access is granted or blocked. |
| cyber risk insurance | A type of insurance policy that protects businesses from losses resulting from attacks, viruses, sabotage, and so on. It typically ha specific coverages and exclusions like any insurance policy |
| due process | A legal concept that ensures the government respects a person's rights or places limitations on legal proceedings to guarantee fundamental fairness, justice, and liberty. |
| escalation procedure | A set of roles, responsibilities, and measures taken in response to a security incident. |
| extranet | A private network a company sets up as an extension of its corporate intranet for the purpose of allowing outside entities (contrators, suppliers, partners, and so on) access to only a limited portion of the network infrastructure. |
| Fourth Amendment | Amendment in the U.S. Bill of Rights provides constitutional protection from illegal search and seizure and guarantees the right to due process. It also implies an expected right of privacy, even though no such right is stated specifically. |
| Internet use policy | A policy that defines how users can access and use the internet and specifies what rules apply to e-mail and other communications, such as instant messaging. |
| network security policy | A policy that defines and establishes responsibility for protecting the network and the information processed, stored, and transmitted on the network. |
| privileged access policy | A policy detailing additional access, functions, and responsibilities of users with privileged (administrative or root) access to resources |
| remote access and wireless connection policy | A policy that defines what security measures need to be in place on a remote desktop or wireless connection before connecting to the organization's network |
| role-based authentication | A method of authentication that grants users limited access based on the role they are assigned in the company and defines what resources the role is allowed to use |
| search warrant | A legal document issued by the court allowing a search of a specified place for specific evidence. The warrant must detail what the search is seeking and where law enforcement is permitted to look for it. |
| Security incident response team (SIRT) | A group of people designated to take countermeasures when an incident is reported |
| security user awareness program | A training program designed to educate users about security topics, answer their questions about security, and prepare users to accept changes made for security purposes. |
| Server security policy | A Policy that regulates IT staff who have privileged access to company servers. This policy should cover all servers, including Web and database servers. |
| subpoena | A legal document requiring a person to appear, provide testimony, or cooperate with law enforcement. Testimony consists of written or oral declaration of facts under penalty of law |
| tunneling protocols | Network protocols that encapsulate (wrap) one protocol or session inside another |
| worst-case scenarios | Descriptions of the worst consequences that befall an organization if a threat occurs |
First Time Here?
Welcome to Quizlet, a fun, free place to study. Try these flashcards, find others to study, or make your own.