IS 4220 FINAL Questions

Term
1 / 10
Return Time Objective (RTO)
Click the card to flip 👆
Terms in this set (10)
Return Time Objective (RTO)
duration of time and service level in which a business process must be restored after a disaster in order to avoid consequences with break of continuity
Recovery Point Objective (RPO)
interval of time that might pass during a disruption before the quantity of data lost during the period exceeds tolerance
Mean Time B/W Failures (MTBF)
average time b/w system breakdown
Mean Time to Repair (MTTR)
maintenance metric that measures the average time required to troubleshoot and repair failed equipment
Defense in Depth
idea that we cannot use just 1 piece of hardware or software to protect our environment
- have layers of defense to protect 5 components (hardware, software, data, procedure, people)
- protection range from both physical controls to network configurations
CIA
protects IT resources
- Confidentiality: keeps data secret and is authorized/need to know basis
- Integrity: created/updated by authorized sources to make sure is accurate
- Availability: systems/data is available when needed
DR four steps
1. develop DR strategies
2. develop contingency plan (hot site, warm site, cold site)
3. testing (make sure everything is ok)
4. maintenance
BG ISMS
1. Avoidance: reduce risk through awareness and eliminating unnecessary data (policy)
2. Prevention: stops threats through protective controls
3. Detection: identify attempts/breaches of data/system through monitoring
4. Incident Response: react to incidents to mitigate impact and learn from it
NSIT purpose
with all this cybersecurity and networking knowledge, this provides IT professionals a framework to follow to build and have a secure system and data
NSIT framework
1. identify: select the proper policies and procedures for the org's security
2. protect: maintenance and processes to make sure the system is secure
3. detect: process to detect potential security attack
4. respond: process to response when there is a security attack
5. recover: planning on what to do to recover what could be in jeopardy in a security attack