Security & Risk Management Flashcards

What is the primary goal of risk management in IT?

Answer: Minimize the impact of security threats

Risk management in IT is a systematic process of identifying, assessing, and controlling threats to an organization's information assets. Its primary goal is not to eliminate all risks, which is often impossible, but rather to minimize the potential negative impact of security threats and vulnerabilities on business operations and data. This ensures business continuity and protects valuable information.

What is the role of encryption in data security?

Answer: Converts data into unreadable format

Encryption is a fundamental security technique that transforms data into an unreadable, encoded format, known as ciphertext. This process makes the data unintelligible to unauthorized individuals, even if they gain access to it. The primary role of encryption is to protect the confidentiality of information, ensuring that only authorized parties with the correct decryption key can access and understand the original data.

Which type of security focuses on protecting physical devices?

Answer: Physical security

Physical security specifically addresses the protection of tangible assets, including hardware, infrastructure, and the physical environment where IT systems reside. This involves measures like access controls (locks, badges), surveillance systems, environmental controls, and fire suppression. Its purpose is to prevent unauthorized physical access, theft, damage, or disruption to IT equipment and facilities.

Which policy defines how users access resources in an organization?

Answer: Access control policy

An access control policy is a set of rules that dictates who can access specific resources (e.g., files, systems, applications) within an organization and what actions they are permitted to perform. It defines user roles, permissions, and authentication requirements, ensuring that only authorized individuals can interact with sensitive information and systems. This policy is crucial for maintaining data confidentiality, integrity, and availability.

What is the purpose of a security audit?

Answer: Assess and verify security effectiveness

A security audit is a systematic evaluation of an organization's information system security. Its purpose is to assess whether security controls are properly implemented, operating effectively, and compliant with established policies, standards, and regulations. By verifying the effectiveness of security measures, audits help identify weaknesses, ensure adherence to best practices, and provide assurance regarding the protection of information assets.

What is a zero-day vulnerability?

Answer: A security flaw with no known patch

A zero-day vulnerability refers to a software flaw that is unknown to the vendor or for which no official patch or fix has been released yet. Attackers can exploit these vulnerabilities before developers have a chance to address them, making them particularly dangerous. The term 'zero-day' signifies that developers have had zero days to fix the issue since it became known to attackers.

Why is employee training essential for security?

Answer: Improves awareness and threat response

Employee training is crucial for security because human error is a leading cause of security breaches. Well-trained employees are more aware of common threats like phishing, social engineering, and malware, and understand their role in protecting sensitive information. This improved awareness enables them to identify and respond appropriately to potential security incidents, significantly strengthening an organization's overall security posture.

Which framework provides guidelines for managing information security?

Answer: NIST

NIST, the National Institute of Standards and Technology, provides widely recognized and respected frameworks and guidelines for managing information security. The NIST Cybersecurity Framework, for example, offers a flexible and comprehensive approach for organizations to assess and improve their ability to prevent, detect, and respond to cyberattacks. These guidelines are adopted globally to enhance security practices.

What does MFA stand for in security?

Answer: Multi-Factor Authentication

MFA stands for Multi-Factor Authentication, a security enhancement that requires users to provide two or more verification factors to gain access to an account or system. Instead of just a password, it typically combines something you know (password), something you have (phone, token), or something you are (fingerprint, face scan). This layered approach significantly increases security by making it much harder for unauthorized users to access accounts, even if they compromise one factor.