CISSP Chapter 4: Laws, Regulations, and Compliance || Top Grade
Assured.
What are the 3 types of law? correct answers Criminal law, civil law, and administrative law.
___________ law forms the bedrock of the body of laws that preserve the peace and keep our
society safe. Laws that police concern themselves with. Murder/assault/robbery/arson/etc. correct
answers Criminal
________ law is the bulk of our body of laws. Designed to provide for an orderly society and
govern matters that are not crimes but require an impartial arbiter to settle between individuals
and organizations. Contract disputes, real estate transactions, employment matters, and
estate/probate procedures. correct answers Civil
The executive branch charges numerous agencies with wide-ranging responsibilities to ensure
that government functions effectively. It is the duty of these agencies to abide by and enforce the
criminal and civil laws enacted by the legislative branch. These agencies have some room to
enact __________ law, in the form of policies, procedures, and regulations that govern the daily
operations of the agency. correct answers Administrative
The first law that included computer crime was the _____________. correct answers
Comprehensive Crime Control Act (CCCA) of 1984
Computer crime laws enacted as a part of the CCCA were amended by the more well-known
__________________ in 1986 to change the scope of regulation. Changed to cover all "federal
interest computers". correct answers Computer Fraud and Abuse Act (CFAA)
The ___________ is an amendment of the CFAA and outlaws the creation of malicious code,
covers all computers used in interstate commerce (rather than federal interest), allows for the
imprisonment of offenders, and provides legal authority for victims to pursue civil suits. correct
answers Computer Abuse Amendments Act (CAAA) of 1994
, The _________ was enacted to mandate baseline security requirements for all federal agencies.
This law sets NIST/NSA responsible for these standards, provides for the enactment of these
standards, requires the establishment of security plans by all operators of federal computer
systems that contain sensitive information, and requires mandatory periodic training for all
people involved in management/use/operation of federal computer systems containing federal
information. correct answers Computer Security Act (CSA) of 1984.
___________ controls standards/guidelines for government agencies. correct answers NSA
_________ controls standards/guidelines for private organizations. correct answers NIST
The __________ provides punishment guidelines to help federal judges interpret computer crime
using 3 provisions. correct answers Federal Sentencing Guidelines
The __________ requires senior executives to take personal responsibility for ensuring the due
care that ordinary individuals would have to exercise in the same situation. correct answers
Prudent man rule (of the Federal sentencing guidelines)
The 3 burdens of proof for negligence outlined by the Federal Sentencing Guidelines are: correct
answers The person accused must have a legally recognized obligation, the person must have
failed to comply with recognized standards and there must be a causal relationship between the
act of negligence and subsequent damages.
The __________ was another set of amendments to the CFAA that included computer systems
used in international commerce, extending protections to national infrastructure, and treats any
intentional/reckless act that causes damage to critical portions of national infrastructure as a
felony. correct answers National Information Infrastructure Protection Act of 1996
The _________ requires that agencies obtain Office of Management and Budget (OMB)
approval before requesting most types of information from the public. correct answers
Paperwork Reduction Act of 1995
Assured.
What are the 3 types of law? correct answers Criminal law, civil law, and administrative law.
___________ law forms the bedrock of the body of laws that preserve the peace and keep our
society safe. Laws that police concern themselves with. Murder/assault/robbery/arson/etc. correct
answers Criminal
________ law is the bulk of our body of laws. Designed to provide for an orderly society and
govern matters that are not crimes but require an impartial arbiter to settle between individuals
and organizations. Contract disputes, real estate transactions, employment matters, and
estate/probate procedures. correct answers Civil
The executive branch charges numerous agencies with wide-ranging responsibilities to ensure
that government functions effectively. It is the duty of these agencies to abide by and enforce the
criminal and civil laws enacted by the legislative branch. These agencies have some room to
enact __________ law, in the form of policies, procedures, and regulations that govern the daily
operations of the agency. correct answers Administrative
The first law that included computer crime was the _____________. correct answers
Comprehensive Crime Control Act (CCCA) of 1984
Computer crime laws enacted as a part of the CCCA were amended by the more well-known
__________________ in 1986 to change the scope of regulation. Changed to cover all "federal
interest computers". correct answers Computer Fraud and Abuse Act (CFAA)
The ___________ is an amendment of the CFAA and outlaws the creation of malicious code,
covers all computers used in interstate commerce (rather than federal interest), allows for the
imprisonment of offenders, and provides legal authority for victims to pursue civil suits. correct
answers Computer Abuse Amendments Act (CAAA) of 1994
, The _________ was enacted to mandate baseline security requirements for all federal agencies.
This law sets NIST/NSA responsible for these standards, provides for the enactment of these
standards, requires the establishment of security plans by all operators of federal computer
systems that contain sensitive information, and requires mandatory periodic training for all
people involved in management/use/operation of federal computer systems containing federal
information. correct answers Computer Security Act (CSA) of 1984.
___________ controls standards/guidelines for government agencies. correct answers NSA
_________ controls standards/guidelines for private organizations. correct answers NIST
The __________ provides punishment guidelines to help federal judges interpret computer crime
using 3 provisions. correct answers Federal Sentencing Guidelines
The __________ requires senior executives to take personal responsibility for ensuring the due
care that ordinary individuals would have to exercise in the same situation. correct answers
Prudent man rule (of the Federal sentencing guidelines)
The 3 burdens of proof for negligence outlined by the Federal Sentencing Guidelines are: correct
answers The person accused must have a legally recognized obligation, the person must have
failed to comply with recognized standards and there must be a causal relationship between the
act of negligence and subsequent damages.
The __________ was another set of amendments to the CFAA that included computer systems
used in international commerce, extending protections to national infrastructure, and treats any
intentional/reckless act that causes damage to critical portions of national infrastructure as a
felony. correct answers National Information Infrastructure Protection Act of 1996
The _________ requires that agencies obtain Office of Management and Budget (OMB)
approval before requesting most types of information from the public. correct answers
Paperwork Reduction Act of 1995
