Create an account
_____ is the application of controls to reduce the risks to an organization's data and information systems.
data classification scheme
Many corporations use a _____ to help secure the confidentiality and integrity of information.
A _____ is an authorization issued by an organization for the repair, modification, or update of a piece of equipment.
In the U.S. military classification scheme, _____ data is any information or material the unauthorized disclosure of which reasonably could be expected to cause damage to the national security.
ALL OF THE ABOVE
Management of classified data includes its storage and _____.
There are individuals who search trash and recycling - a practice known as _____ -to retrieve information that could embarrass a company or compromise information security.
weighted factor analysis
In a _____, each information asset is assigned a score for each of a set of assigned critical factor.
_____ equals likelihood of vulnerability occurrence times value (or impact) minus percentage risk already controlled plus an element of uncertainty.
The ____ security policy is an executive-level document that outlines the organization's approach and attitude towards information security and relates the strategic value of information security within the organization.
The ____ security policy is a planning document that outlines the process of implementing security in the organization.
The _____ strategy attempts to shift risk to other assets, other processes, or other organizations.
The actions an organization can and perhaps should take while an incident is in progress should be specified in a document called the _____ plan.
_____ plans usually include all preparations for the recovery process, strategies to limit losses during the disaster, and detailed steps to follow when the smoke clears, the dust settles, or the floodwaters recede.
The _____ strategy is the choice to do nothing to protect a vulnerability and to accept the outcome of its exploitation.
The formal decision making process used when considering the economic feasibility of implementing information security controls and safeguards is called a _____.
standard of due care
When organizations adopt levels of security for a legal defense, they may need to show that they have done what any prudent organization would do in similar circumstances. This is referred to as a _____.
_____ feasibility analysis examines user acceptance and support, management acceptance and support, and the overall requirements of the organization's stakeholders.
Please allow access to your computer’s microphone to use Voice Recording.
Having trouble? Click here for help.
We can’t access your microphone!
Click the icon above to update your browser permissions and try again
Reload the page to try again!Reload
Press Cmd-0 to reset your zoom
Press Ctrl-0 to reset your zoom
It looks like your browser might be zoomed in or out. Your browser needs to be zoomed to a normal size to record audio.
Please upgrade Flash or install Chrome
to use Voice Recording.
For more help, see our troubleshooting page.
Your microphone is muted
For help fixing this issue, see this FAQ.
Star this term
You can study starred terms together