We’ve updated our privacy policy so that we are compliant with changing global privacy regulations and to provide you with insight into the limited ways in which we use your data. Show
You can read the details below. By accepting, you agree to the updated privacy policy. Thank you! View updated privacy policy We've encountered a problem, please try again. The Security Maintenance ModelA maintenance model is intended to complement the chosenmanagement model and focus organizational effort on maintenance.oExternal monitoring: The objective of the external monitoring domain in the maintenance model isto provide early awareness of new and emerging threats, threat agents, vulnerabilities, and attacks sothat an effective and timely defense can be mountedoInternal monitoring: The objective of the internal monitoring domain is an informed awareness ofthe state of the organization’s networks, information systems, and information security defenses. Thesecurity team documents and communicates this awareness, particularly when it concerns systemcomponents that face the external network.Internal monitoring is accomplished by:Building and maintaining an inventory of network devices and channels, IT infrastructure andapplications, and information security infrastructure elementsActive participation in, or leadership of, the IT governance process within the organization tointegrate the inevitable changes found in all network, IT, and information security programsReal-time monitoring of IT activity using intrusion detection systems to detect and initiate responsesto specific actions or trends of events that introduce risk to the organization’s assetsPeriodic monitoring of the internal state of the organization’s networks and systemsoPlanning and risk assessment: The primary objective of the planning and risk assessment domain isto keep an eye on the entire information security program.by:Establish a formal information security program reviewInstitute formal project identification, selection, planning, & mgmt. processesCoordinate with IT for risk assessment and review for all IT projectsoVulnerability assessment and remediation:The primary objectives of the vulnerability assessmentand remediation domain are to identify specific, documented vulnerabilities and remediate them in atimely fashion. This is accomplished by:Using vulnerability assessment procedures that are documented to safely collect intelligence aboutnetwork, platforms, dial-in modems, and wireless network systemsDocumenting background information and providing tested remediation procedures for the reportedvulnerabilitiesTracking, communicating, reporting, and escalating to management the itemized facts about thediscovered vulnerabilities and the success or failure of the organization to remediate them The objective of the external monitoring domain with in the maintenance model is to provide the early awareness of new and emerging threats, threat agents, vulnerabilities and attacks the organization needs insider to mount an effective and timely defense. Which of the following is the component of the maintenance model that focuses on identifying assessing and managing the configuration and status of information assets in an organization?Internal monitoring:The component of the maintenance model that focuses on identifying, assessing, and managing the configuration and status of information assets in an organization. Is the component of the maintenance model that focuses on evaluating external threats to the organization’s information assets?> External monitoring: The component of the maintenance model that focuses on evaluating external threats to the organization’s information assets. What is the primary goal of vulnerability assessment and remediation?Vulnerability assessment—also called vulnerability analysis—is a process that identifies, quantifies and analyzes security weaknesses in IT infrastructure. The VA’s primary goal is to unearth any vulnerabilities that can compromise the organization’s overall security and operations. What is the primary objective of the readiness and review domain of the maintenance model?The primary goal of the readiness and review domain is to keep the information security program functioning as designed and to keep it continuously improving over time. What is the objective of the planning and risk assessment domain in an Organisation?The primary objective of the planning and risk assessment domain according to our text is to keep lookout over the entire information security program, in part by planning ongoing information security activities that further reduce risk. What is meant by vulnerability assessment?A vulnerability assessment is a systematic review of security weaknesses in an information system. It evaluates if the system is susceptible to any known vulnerabilities, assigns severity levels to those vulnerabilities, and recommends remediation or mitigation, if and whenever needed. What are the three primary aspects of information security risk management?The fundamental principles (tenets) of information security are confidentiality, integrity, and availability. Every element of an information security program (and every security control put in place by an entity) should be designed to achieve one or more of these principles. What is the primary focus of a vulnerability assessment?A vulnerability assessment proactively tests and identifies the potential of your system to be breached by bad actors, while also determining exactly how much of your system could be compromised in event of such a breach. It tests the resilience of your systems and networks to withstand cyber attacks. Which of the following is a key advantage of the bottom up approach?The advantage of bottom-up planning is that the team members, i.e. the people who are actively working on the project, have a say in the project planning and decisions are made collaboratively. This will improve team communication and team building, and also empowers the team members. How information security risks are classified?Data and systems are classified as Low Risk if they are not considered to be Moderate or High Risk, and: The data is intended for public disclosure, or. The loss of confidentiality, integrity, or availability of the data or system would have no adverse impact on our mission, safety, finances, or reputation. What are the potential risks for information?IT risks include hardware and software failure, human error, spam, viruses and malicious attacks, as well as natural disasters such as fires, cyclones or floods. You can manage IT risks by completing a business risk assessment. Having a business continuity plan can help your business recover from an IT incident. What are the possible security risks of information systems?Information Security threats can be many like Software attacks, theft of intellectual property, identity theft, theft of equipment or information, sabotage, and information extortion. What are the 4 main types of vulnerability?The different types of vulnerability In the table below four different types of vulnerability have been identified, Human-social, Physical, Economic and Environmental and their associated direct and indirect losses. Which of the following is best used with vulnerability assessments?Explanation: White box testing provides the penetration testers information about the target network before they start their work. This information can include such details as IP addresses, network infrastructure schematics and the protocols used plus the source code. What are the types of vulnerability assessments?
What is the objective of the planning and risk assessment domain of the maintenance model?The primary objective of the planning and risk assessment domain according to our text is to keep lookout over the entire information security program, in part by planning ongoing information security activities that further reduce risk.
What are the five domains of the General information security Maintenance Model?The five domains of the security maintenance model are external monitoring, planning and risk assessment, internal monitoring, readiness and review, and vulnerability assessment and remediation.
What are the three primary aspects of information security risk management?The CIA triad refers to an information security model made up of the three main components: confidentiality, integrity and availability.
What is the primary goal of the vulnerability assessment and remediation?Vulnerability assessment—also called vulnerability analysis—is a process that identifies, quantifies and analyzes security weaknesses in IT infrastructure. The VA's primary goal is to unearth any vulnerabilities that can compromise the organization's overall security and operations.
|
What is the primary objective of the readiness and review domain of the maintenance model?
zusammenhängende Posts
Urheberrechte © © 2024 ketiadaan Inc.
