Information
Physical Security
Availability
The Enemy
Internet
100

Random seemingly unrelated facts, numbers, words or statistics.

Data

100

Overlapping layers of protection put in place so that if one layer fails other layers succeed in protecting is known as....

Defense in Depth

100

To apply or maintain permissions to prevent an account from getting information they are not authorized to see while making the information available to those who are authorized.

Access Control

100

They are people who traditionally tried to gain access to computers remotely to learn more and for intellectual curiosity. Currently, they only make up 17% of computer intrusions.

hackers

100

A program that is designed only to read Hyper Text Markup Language (HTML) web pages downloaded from Internet websites. They can have helpers or add-on functions incorporated by using interpreters to read the additional instructions and provide different web content types. Internet Explorer, Firefox and Safari are examples of these.

a browser? (or web browser)

200

Data compiled into documents, maps, charts, and other forms of information gives assets dollar _____________

Value


200

The list of computers, laptops, software, equipment owned by an organization.

Inventory or Asset Inventory

200

An identifier that uniquely tracks actions to individuals.

Account (or Login ID)

200

Is the risk presented to an organization by current or past employees who have knowledge of how the organization works and what and where the most valuable (damaging) information might reside.

Insider threat

200

Easily readable programs that automate or provide extra function on a computer system or in an application or browser. ActiveX and JavaScript are examples of this type of language.

Scripting (or Scripting Code or Scripting Language)

300

Any combination of your name, your home address or phone number, credit card or account numbers or social security number.

PII or Personally Identifiable Information

300

The use of personality, knowledge of human nature and social skills to steal passwords, keys tokens or other credentials to gain access to systems.

Social Engineering

300

Functional managers classify data and grant approval to those whose jobs require access to the information.

Data Managers

300

These are well run groups of crooks who methodically look for computer vulnerabilities to steal large numbers of financial or credit card accounts for financial profit.

organized crime groups

300

A type of a program that takes scripting language and reads it so it can be acted on by a browser or an application. These are found in almost all operating systems, web browsers and many commercial off the shelf application programs.

Interpreter

400

The evidence of daily decisions and operations within DOI and its bureaus/offices.

Federal Records

400

30-50% of all data loss due to the people already within the organization.

Insider Threat

400

What is a group of computers networked together and used by hackers to steal information called?

Botnet

400

They are structured groups funded by other governments and dedicated to mapping out the internet addresses for the purpose of espionage and possible computer attacks.

state sponsored hacking

400

The contents of electronic documents that can carry out or trigger actions automatically, on a computer platform, without the intervention of a user. Active content includes built in macro processing, scripting languages, or virtual machines. A significant share of today’s malware involves this type of programs.

Active Content

500

A legal notification directing you or the bureau/office to preserve any documentary material that may berelevant to a pending or foreseable lawsuit or administrative adjudication.

Litigation Hold

500

A necessary process to limit the kinds of hardware and software which minimizes the number of different vulnerabilities and reduces exposure to security weaknesses.

Standardization

500

It is a word or phrase that verifies that you and only you had access to the account.

Password

500

The weakest link in every computer system. The one person who can through thoughtlessness, unawareness or accident, cause loss of work products through deletion, corruption or improperly safeguarding data.

Human

500

What type of software infects a machine, locks the files, then asks for money?

Ransomware