DCO Questions and Answers | New One | Grade A+DCO Questions and Answers | New One | Grade A+

Confidentiality Ans: the assurance that messages and information are available only to those who are authorized to view them Integrity Ans: the assurance that info remains intact, correct, and authentic Availability Ans: the assurance that users can access and work with resources and systems when needed, with sufficient performance Types of Threats Ans: environmental, external, internal, structured, unstructured Incident Ans: when a vulnerability is exploited GRADE A+ Management Controls Ans: safeguards/countermeasures to reduce risk Risk Ans: NIST SP 800-30 - Defines risk as "a function of the likelihood of a threat event's occurrence and potential adverse impact should the event occur. Risk Model Ans: three step process to determine likelihood of threats 1. Will a threat happen? 2. If a threat happens will it have an adverse impact? 3. How likely is it for an event to happen and cause an adverse impact