Grand Theft Data
If you are leaving your computer unattended you must Ctrl-Alt-Delete + Enter to lock your screen, but this is another, shorter key sequence to do the same thing.
What is the Windows button + L key sequence?
This type of review ensures security controls are in place and effective.
What is a security audit?
This is the action taken when a CIP employee does not complete their annual training.
What is access revocation?
These are the three key components of an effective internal control system.
What are preventive, detective, and corrective controls?
This CIP requirement focuses on ensuring personnel receive training and authorization.
What is CIP-004?
This document identifies audit findings and tracks remediation progress.
What is an audit report?
During a grid-impacting cyber event, the CSO team must coordinate directly with this federal agency for threat intel.
What is Cybersecurity and Infrastructure Security Agency (CISA)?
*** DOUBLE JEOPARDY***
A technique used to attack data-driven applications in which nefarious statements are inserted into an entry field for execution.
What is a SQL injection?
*** DOUBLE JEOPARDY***
This term describes when an auditor evaluates compliance with security standards.
What is a compliance audit?
This plan outlines how the company coordinates cyber and physical responses during incidents affecting critical systems.
What is the Incident Response and Recovery Plan?
Public, General Use and Sensitive
What are our company Information Classification Levels?
This process involves continuous review and testing of security and operational controls.
What is continuous monitoring?
The security controls that protect critical infrastructure, particularly in the utility sector, from unauthorized entry.
What is CIP access