Show:
Questions
Responses
Print
Risk
Defense Mechanisms
Communication Controls
Managing Data
Data
100
To identify, control, and minimize the impact of threats.
What is Risk Management
100
Walls, doors, fencing, gates, locks, badges, guards, and alarm systems.
What is a Physical Control
100
A system that prevents a specific type of information from moving between untrusted networks.
What is a Firewall
100
An approach to managing information across an entire organization.
What is Data Governance
100
The same data are stored in multiple locations.
What is Data Redundancy
200
Assessing, estimating, and comparing the probable costs of asset's being compromised with the cost of protecting that asset.
What is Risk Analysis
200
Restrict unauthorized individuals from using information resources.
What is Access Controls
200
Software packages that attempt to identify and eliminate viruses and worms, and other malicious software.
What is Antivirus
200
A process that spans all organizational business processes and applications.
What is Master Data Management
200
Applications cannot access data associated with other applications.
What is Data Isolation
300
Implementing controls to prevent identified threats from occurring, and developing a means of recovery if the threat becomes a reality.
What is Risk Mitigation
300
Confirms the identity of the person requiring access.
What is Authentication
300
A process in which a company identifies the software that it will allow to run on its computers.
What is Whitelisting
300
A set of core data that span the enterprise information systems.
What is Master Data
300
Various copies of the data do not agree
What is Data Inconsistency
400
Accept the potential risk, continue operating with no controls, and absorb any damages that occur.
What is Risk Acceptance
400
Determines which actions, rights, or privileges the person has, based on his or her verified identity.
What is Authorization
400
The process of converting an original message into a form that cannot be read by anyone except the intended receiver.
What is Encryption
400
Those data that visitors and customers produce when they visit a Web site and click on hyperlinks.
What is Clickstream Data
400
Because data are "put in one place" in databases, there is a risk of losing a lot of data at once.
What is Data Security
500
Limit the risk by implementing controls that minimize the impact of the threat.
What is Risk Limitation
500
An authentication method that examines a person's innate physical characteristics.
What is Biometrics
500
A private network that uses a public network to connect users.
What is a Virtual Private Network
500
Problems with the media on which the data are stored
What is Data Rot
500
Applications and data are independent of one another so all applications are able to access the same data.
What is Data Independence