Istm 655 - Study guides, Class notes & Summaries

ISTM 655 FINAL EXAM QUESTIONS WITH COMPLETE SOLUTION How many SME's don't have a response plan? - CORRECT ANSWERS 30% SME - CORRECT ANSWERS small and medium enterprise Incident response phases - CORRECT ANSWERS - preparation - identification - containment - eradication - recovery - lessons learned Preparation questions - CORRECT ANSWERS - has everyone been trained on security policies? ...

ISTM 655 FINAL EXAM QUESTIONS WITH COMPLETE SOLUTION How many SME's don't have a response plan? - CORRECT ANSWERS 30% SME - CORRECT ANSWERS small and medium enterprise Incident response phases - CORRECT ANSWERS - preparation - identification - containment - eradication - recovery - lessons learned Preparation questions - CORRECT ANSWERS - has everyone been trained on security policies? ...

To minimize liabilities/reduce risks, the information security practitioner must: correct answers 1. understand the current legal environment 2. stay current with laws and regulations 3. watch for new and emerging issues laws correct answers rules that mandate or prohibit certain behavior laws are enforced by correct answers the state ethics correct answers regulate and define socially acceptable behavior cultural mores correct answers fixed moral attitudes or custom...

how many SME's don't have a response plan? correct answers 30% SME correct answers small and medium enterprise incident response phases correct answers - preparation - identification - containment - eradication - recovery - lessons learned preparation questions correct answers - has everyone been trained on security policies? - does incident response team know their roles and the required notifications to make? etc. identification quesitons correct answers - wh...

3 perspectives to consider risk correct answers - foregone revenue and ancillary payments - liability losses - reputational damage First step in estimating costs correct answers - identify assets and greatest vulnerabilities 2 categories of risk correct answers - those involving services shutting down - those that compromise informaiton Why is cybersecurity under invested ? correct answers - difficult to estimate necessary investments (like estimating frequency and succes...

6 Phases of Incident Response correct answers 1. Preparation 2. Identification 3. Containment 4. Eradication 5. Recovery 6. Lessons learned Homeland security company that helps A&M with incident response planning correct answers TEEX This product gives the most complete view of attackers' infrastructures to prevent future threats correct answers Cisco Umbrella Investigate Average total cost of a breach in the US correct answers $7M CERT Notification Guidelines or NI...

Cyber criminals and hackers are always looking for______. They are realizing that the shortest way is not through the front door, but through the '________' that make up a digitally enabled supply chain. correct answers the easiest route into an organisation's systems and data; weaker links Who said "perfection is the enemy of progress" correct answers winston churchill A company's reputation established and nurtured for 100 years can suffer severe and lasting damage following ...

What are the current threat trends? correct answers 1. ransomware, cryptocurrency mining, and money 2. software supply chains at risk 3. phishing still prevails 4. malware around the world Why is Cybersecurity so hard? correct answers 1. it's not just a technical problem 2. the rules of cyberspace are different from the physical world's 3. cybersecurity law, policy, and practice are not yet fully developed _____________ have been significant sources of hacking attempts corr...

Who is the author correct answers Tim Pinnell operational resilience correct answers the ability to alter operations in the face of changing business conditions. it is the ability to quickly ramp up or slow down with quick and local process modification the ability to adapt to risk that affects its __________________. it is a property of ____________. it is a subset of ____________, the ability to manage operational risk correct answers core operational abilities, effective risk m...