Four Broad categories of Threats - Answers Human, Natural, Technological and operational, and
Physical and Environmental
Information - Answers Intelligence, knowledge, and data. You can store information in paper or
electronic form.
Personally Identifiable Information (PII) - Answers Social Security numbers
Driver's license numbers
Financial account data, such as account numbers or personal identification numbers (PINs)
Health data and biometric data
Authentication credentials, such as logon or usernames and passwords
Information security - Answers The study and practice of protecting information. The main goal
of information security is to protect its confidentiality, integrity, and availability.
Cryptography - Answers is the practice of hiding information so that unauthorized persons can't
read it.
Confidentiality - Answers means that only people with the right permission can access and use
information.
Integrity - Answers means that information systems and their data are accurate.
Availability - Answers is the security goal of making sure information systems operate reliably.
Risk management - Answers is the process of understanding the risks that an organization
faces and then taking steps to address or mitigate them.
vulnerability - Answers is a weakness or flaw in an information system.
separation of duties principle - Answers This rule requires that two or more employees must
split critical task functions so that no employee knows all of the steps of the critical task.
Exploits - Answers are successful attacks against a vulnerability
Threats - Answers are anything that can harm an information system. They are successful
exploits against vulnerabilities.
risk - Answers the likelihood that a threat will exploit a vulnerability and cause harm.
A safeguard - Answers is any protective action that reduces exposure to vulnerabilities or
threats.