INMT 341 Final Questions with Answers

INMT 341 Final Questions with Answers Goverance - Answer-Governing/managing processes, technology, and systems Risk Management - Answer-Identifying (and controlling) the risks associated with processes, technologies and systems Compliance - Answer-Adhering to the laws and regulations that govern organizations (which can vary based on industry, location, and organizational structure). FISMA - Answer-US federal agencies protection of Information and IT systems. GLBA - Answer-US financial institutions must protect privacy of personal information, safety of Internet‐based products and services, fair and accurate credit transactions, anti‐terrorism. SOX (Sarbanes-Oxley Act) - Answer-Secures public against corporate fraud and misrepresentation Risk - Answer-a measure of the potential for loss or damage when a threat exploits a vulnerability. Standard - Answer-A definition or format that has been approved by a recognized standards organization or is accepted as a de facto standard by the industry. Generally accepted all over as the best method of doing something. (These are more specific) Framework - Answer-An IT governance framework is a type of framework that defines the ways and methods through which an organization can implement, manage and monitor IT governance within an organization. An IT governance framework can provide guidelines and measure to effectively use IT resources and processes within an organization. (More general guidance) Key Standard Setting Groups - Answer-ISO, NIST Example Frameworks - Answer-COSO, COBIT, ITIL, HMG, ISACA Vulnerability - Answer-Weakness or flaw in an information asset/system (infrastructure, networks, or applications) that potentially exposes an entity to threats. Vulnerabilities include security flaws in a system that allow an attack to be successful. A vulnerability might include system security procedures, internal controls, or implementation that could be exploited or triggered by a threat source.