C836 Module 1, Questions & answers. 100% Accurate. verified

C836 Module 1, Questions & answers. 100% Accurate. verified What is Information Security? - -protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction What are our single most valuable asset in business? - -people what is the goal of a security plan? - -to find the balance between protection, usability, and cost What should the cost of security never do? - -outstrip the value of what it is protecting When is a system secure? - -Never: there is always a vulnerability What does PCI DSS regulate? - -companies that process credit card payments What does HIPPA regulate? - -organizations that handle medical records What isFISMA? - -provides a framework for ensuring the effectiveness of information security controls in government. It is intended to protect government information, operations, and assets from any natural or manmade threat. requires each federal agency to develop, document, and implement an information security program to protect its information and systems. Annual reviews of these programs are required to maintain compliance and keep security risks to an acceptable level. What is Confidentiality? - -our ability to protect data from those who are not authorized to view it What is Integrity? - -the ability to prevent our data from being changed in an unauthorized or undesireable manner What are some ways we can control Integrity? - -In Windows: implementing permissions that restrict what actions an unauthorized user can perform on a given file In a Database: rolling back or undoing changes that are undesirable What is Availability? - -the ability to access our data when we need it How can Confidentiality be compromised? - -by the loss of a laptop containing data, an e-mail attachment being sent to the wrong person How can Integrity be compromised