CIPM CH 4 Protect

Question 1

Information security management system

Answer 1

A set of processes that provides management with governance capabilities to manage the entire information security program

Question 2

Identity and access management

Answer 2

Foundational Activities

. Measurement of an accurate inventory of workers in the organization

. Measurement of all these workers access rights to networks, systems, data, applications, and places where business operations systems take place

Question 3

Access controls

Answer 3

Are used to determine whether and how subjects (usually person) are able to access objects, using the systems and or data,

Logical access controls works two ways:
. Subject access: a logical Access Control uses some means to determine the identity of a subject requesting access

. service access: access control is used to control the types of messages that are allowed to pass through a control port. Logical access control is designed to permit or deny messages of specified types