Exam (elaborations) WGU C795

OOM (Object-oriented modeling): It is heavily used by both OOA and OOD activities in modern software engineering. ISO/IEC 20000 Family ISO27001 - ISO27002 - ISO27005 - ISO - ISO - ISO27001 - Requirements ISO27002 - Code of Practice ISO27005 - Risk Management ISO - Digital Evidence ISO - Electronic Delivery CIA triad (Confidentiality, Integrity, Availability) All Security functions Begin with Policy Confidentiality - Protection of sensitive assets: Intellectually property: Research or business plans Information: Privacy or secrecy Confidentiality - Breaches: Intentional or accidental Covert Channels - Timing(displayed or heard), Storage( on USB) Protection of displayed data - displayed paperwork or monitor. Confidentiality - Effect of Breaches: Legal Penalties Must demonstrate Due Care and Due Diligence Financial Penalties - Lost revenue Reputational Damage Confidentiality - Ensuring Confidentiality: Policy Access Controls: Need to know & Least Privilege. Confidentiality - Enforcing Confidentiality: Encryption, Masking (dots on pw), Obfuscation (not readable/meaningful), Tokenization(Pay at pump, token given to gas station where no one sees card info, just token) Require SSL certificate