WGU D430 fundamentals of information securitys
WGU D430 fundamentals of information security
Study online at https://quizlet.com/_jr9dq0
1. Information se- Keeping data, software, and hardware secure against unauthorized access, use,
curity disclosure, disruption, modification, or destruction.
2. Compliance The requirements that are set forth by laws and industry regulations. Example
: HIPPA/ HITECH- healthcare, PCI/DSS- payment card industry, FISMA- federal
government agencies
3. CIA The core model of all information security. Confidential, integrity and availability
4. Confidential Allowing only those authorized to access the data requested
5. integrity Keeping data unaltered by accidental or malicious intent
6. Availability The ability to access data when needed
7. Parkerian hexad Confidentiality , integrity, availability, possession/control, authenticity, utility
model
8. Possession/ con- Refers to the physical disposition of the media on which the data is stored
trol
9. authenticity Allows us to talk about the proper attribution as to the owner or creator of the data
in question
10. Utility How useful the data is to us
11. Types of attacks 1- interception
2- interruption
3- modification
4- fabrication
12. Interception Attacks allows unauthorized users to access our data, applications, or environ-
ments. Are primarily an attack against confidentiality
13. Interruption
, WGU D430 fundamentals of information securitys
WGU D430 fundamentals of information security
Study online at https://quizlet.com/_jr9dq0
Attacks cause our assets to become unstable or unavailable for our use, on a
temporary or permanent basis. This attack affects availability but can also attack
integrity
14. Modification Attacks involve tampering with our asset. Such attacks might primarily be consid-
ered an integrity attack, but could also be an availability attack.
15. Fabrication Attacks involve generating data, processes, communications, or other similar
activities with a system. Attacks primarily affect integrity but can be considered
an availability attack.
16. Risk The likelihood that a threat will occur. There must be a threat and vulnerability
17. Threat Any event being man-made, natural or environmental that could damage the
assets
18. Vulnerabilities Weakness that a threat event or the threat can take advantage of
19. Impact taking into account the assets cost
20. Controls The ways we protect assets. Physical, technical/ logical, and administrative
21. Physical controls Controls are physical items that protect assets. Think of locks, doors, guards and
fences
22. Technical/ logical Controls are devices and software that protect assets. Think of firewalls, av, ids,
controls and ips
23. Administrative Controls are the policies that organizations create for governance. Ex: email
controls policies
24. risk mamage- A constant process as assets are purchased, used and retired. The general steps
ment are 1- identify assets
2- identify threats
, WGU D430 fundamentals of information securitys
WGU D430 fundamentals of information security
Study online at https://quizlet.com/_jr9dq0
3- assess vulnerabilities
4- assess risk
5- mitigating risks
25. Identify assets First and most important part or risk management. Identifying and categorizing
the assets we are protecting
26. Identify threats Once we have our critical assets we can identify the threats that might effect them
27. Assess Vulnera- Look at potential threats. any given asset may have thousand or millions of threats
bilities that could impact it, but only a small fraction of the threats will be relevant
28. Assess risks Once we have identified the threats and vulnerabilities for a given asset we can
access the overall risk
29. Mitigating risks Putting measures in place to help ensure that a given type of threat is accounted
for
30. Incident re- Response to when risk management practices have failed and have cause an
sponse inconvenience to a disastrous event
31. Incident re- 1 preparation
sponse cycle 2- detection and analysis
3- containment
4- eradication
5- recovery
6- post incident activity
32. Preparation The preparation phase consists of all of the activities that we can preform in
phase advance of the incident itself in order to better enable us to handle it
33. Detection and Where the action begins to happen. We will detect the occurrence of an issue and
analysis phase decide whether or not it is actually an incident so that we can respond
WGU D430 fundamentals of information security
Study online at https://quizlet.com/_jr9dq0
1. Information se- Keeping data, software, and hardware secure against unauthorized access, use,
curity disclosure, disruption, modification, or destruction.
2. Compliance The requirements that are set forth by laws and industry regulations. Example
: HIPPA/ HITECH- healthcare, PCI/DSS- payment card industry, FISMA- federal
government agencies
3. CIA The core model of all information security. Confidential, integrity and availability
4. Confidential Allowing only those authorized to access the data requested
5. integrity Keeping data unaltered by accidental or malicious intent
6. Availability The ability to access data when needed
7. Parkerian hexad Confidentiality , integrity, availability, possession/control, authenticity, utility
model
8. Possession/ con- Refers to the physical disposition of the media on which the data is stored
trol
9. authenticity Allows us to talk about the proper attribution as to the owner or creator of the data
in question
10. Utility How useful the data is to us
11. Types of attacks 1- interception
2- interruption
3- modification
4- fabrication
12. Interception Attacks allows unauthorized users to access our data, applications, or environ-
ments. Are primarily an attack against confidentiality
13. Interruption
, WGU D430 fundamentals of information securitys
WGU D430 fundamentals of information security
Study online at https://quizlet.com/_jr9dq0
Attacks cause our assets to become unstable or unavailable for our use, on a
temporary or permanent basis. This attack affects availability but can also attack
integrity
14. Modification Attacks involve tampering with our asset. Such attacks might primarily be consid-
ered an integrity attack, but could also be an availability attack.
15. Fabrication Attacks involve generating data, processes, communications, or other similar
activities with a system. Attacks primarily affect integrity but can be considered
an availability attack.
16. Risk The likelihood that a threat will occur. There must be a threat and vulnerability
17. Threat Any event being man-made, natural or environmental that could damage the
assets
18. Vulnerabilities Weakness that a threat event or the threat can take advantage of
19. Impact taking into account the assets cost
20. Controls The ways we protect assets. Physical, technical/ logical, and administrative
21. Physical controls Controls are physical items that protect assets. Think of locks, doors, guards and
fences
22. Technical/ logical Controls are devices and software that protect assets. Think of firewalls, av, ids,
controls and ips
23. Administrative Controls are the policies that organizations create for governance. Ex: email
controls policies
24. risk mamage- A constant process as assets are purchased, used and retired. The general steps
ment are 1- identify assets
2- identify threats
, WGU D430 fundamentals of information securitys
WGU D430 fundamentals of information security
Study online at https://quizlet.com/_jr9dq0
3- assess vulnerabilities
4- assess risk
5- mitigating risks
25. Identify assets First and most important part or risk management. Identifying and categorizing
the assets we are protecting
26. Identify threats Once we have our critical assets we can identify the threats that might effect them
27. Assess Vulnera- Look at potential threats. any given asset may have thousand or millions of threats
bilities that could impact it, but only a small fraction of the threats will be relevant
28. Assess risks Once we have identified the threats and vulnerabilities for a given asset we can
access the overall risk
29. Mitigating risks Putting measures in place to help ensure that a given type of threat is accounted
for
30. Incident re- Response to when risk management practices have failed and have cause an
sponse inconvenience to a disastrous event
31. Incident re- 1 preparation
sponse cycle 2- detection and analysis
3- containment
4- eradication
5- recovery
6- post incident activity
32. Preparation The preparation phase consists of all of the activities that we can preform in
phase advance of the incident itself in order to better enable us to handle it
33. Detection and Where the action begins to happen. We will detect the occurrence of an issue and
analysis phase decide whether or not it is actually an incident so that we can respond
