13-2

Question 1

a framework that can be effective in providing a structured applicable to a diverse set of cyber security environments

Answer 1

Control Objects for information and related technologies.

Question 2

first released in 1996. published as an ISO standard 17799:2005 in 2005.version 5 released in April 2012

Answer 2

Cobit

Question 3

the current version of COBIT has 5 components

Answer 3

framework
process descriptions
control objectives
management guidelines
maturity models

Question 4

the component of cobit is one of the aspects of the standard that makes is relatively easy to integrate other standards. its rather general. and requires organizations develop good practices related to the buisness.

Answer 4

framework

Question 5

this component requires the organization to clearly describe all business processes

Answer 5

process descriptions

Question 6

this component requires the organization to establish clear objectives for each security control

Answer 6

control objectives

Question 7

this component requires management to establish responsibility for achieving security goals and implement methods to measure the performance of security controls

Answer 7

managlement guidelines

Question 8

this component examines any prpocess from the point of view of how developed that process is.

Answer 8

maturity models

Question 9

the common criteria foir information security evaluation

Answer 9

ISO/IEC 15408

Question 10

systems and software engineering

Answer 10

ISO/IEC 25000

Question 11

information technology - security technoology

Answer 11

ISO/IEC 27000

Question 12

risk managment

Answer 12

ISO/IEC 27001

Question 13

accredited certification standard

Answer 13

ISO/IEC 27006

Question 14

this special publication describes common security principles that should be addressed within security policies

Answer 14

NIST SP 800-14

Question 15

the purpose of rthe NIST SP 800-14 is to describe 8 principles and 14 practices that can be used to develop security policies. the standard is based on 8 principles which are

Answer 15

“compute” security supports the mission
“” is an integral element of sound management
“” should be cost-effective
““responsibilities and accountability should be made explicit
““requires a comprehensive and integrated approach
“” should be periodically reassessed
“” is security contained by societal factors
system owners have security responsibilities outside their own organization