Domain 1 set 1 Flashcards
(33 cards)
Electronic Discovery Reference Model
EDRM
gives specifies to policy’s?
Standards
Who creates and manage sensitive Data
Data Controllers
AKA: HR Personal
What policy assigns responsibility
Organizational security Policy
Errors in Data Entry is what part of the CIA
Integrity
SLE X ARO =?
ALE Annual loss Expectancy
Who actually store and process Data?
Data Custodians
Who is responsible for approval of disclosure Request?
Data owners
organizations goals in mind standard?
COSO
An policy that covers Email use, privacy and employee personal use issues?
Issue Specific Policy
What sets the direction thru prioritization?
Governance
What are the 7 steps to implement a Classification Scheme?
- Identity Custodian
- Specify Evaluation Criteria
- Classify and Label each Resource
- Document Exceptions
- Select Security Controls
- Specify declassification Procedures
- create Awareness Program
BIA
Business Impact Analysis
What are the 3 Data states?
- At Rest
- in motion
- In Use
Operationally Critical Threat Asset and Vulnerability Evaluation
OCTAVE
BCP
Business Continuity Planning
Ricks are?
The Combination of a Vulnerability and a corresponding threat.
ITADA
Identity Theft and Assumption Deterrence Act
The Key items in privacy protection for DATA Processors are?
Training and Auditing
Governance
Ensures that the state holders needs conditions and options are evaluated.
How long is the Tactical plan made for?
1 year
A Risk Methodologies that focuses on IT Systems not the Organizational Strategy
NIST SP 800-30
A Risk assessment that use Qualitative analysis to calculate An Risk value
FRAP?
BCP / DRP Address what part of the CIA?
Availability
