Sec360 week 8 final - Study guides, Class notes & Summaries

SEC 360 Week 8 Final Question 1 5 pts (TCO 1) Which of the following should not be the basis for security policy? Legislation Corporate directives Corporate needs Vendor documentation Situation awareness reporting Lecture, pages 60-70 in the text Question 2 5 pts (TCO 2) The _____ of the 17 NIST control _____ can be placed into the 10 IISSCC _____ comprising the common body of knowledge for information security. technologies, domains, families controls, families, domains domains, f...

Note: The text in the right column are the post exam sample answers used to help you compare your answers with. 1 (TCO 1) Security policy contains three kinds of rules as policy clauses. What are they? Preventive, detective, and responsive Prohibitive, permissive, and mandatory Administrative, technical, and physical Management, technical, and operational Roles, responsibilities, and exemptions (Lecture Week 1, page 70 and Appendix C in the text) Controls are implemented using administ...