©THEBRIGHT EXAM SOLUTIONS
10/29/2024 11:24 PM
Ch 1 Intro to the Management of
Information Security Exam Study Guide.
Information Security Community - answer✔Protects the organization's information assets from
the many threats they face.
Information Technology Community - answer✔Supports the business objectives of the
organization by supplying and supporting IT that is appropriate to the organization's needs.
General Business Community - answer✔Articulates and communicates organizational policy and
objectives and allocates resources to the other groups.
Security - answer✔The quality or state of being secure - being free from danger. To be secure is
to be protected from the risk of loss, damage, or unwanted modification, or other hazards.
Physical Security - answer✔Protecting people, physical assets, and the workplace from various
threats, including fire, unauthorized access, and natural disasters.
Operations Security - answer✔Protecting the organization's ability to carry out its operational
activities without interruption or compromise.
Information Security (InfoSec) - answer✔The protection of information and its critical
characteristics (confidentiality, integrity, and availability), including the systems and hardware
that use, store, and transmit that information, through the application of policy, training and
awareness programs, and technology.
C.I.A Triangle - answer✔Industry standard for computer security. Characteristics are
confidentiality, integrity, and availability. The triangle has expanded to include privacy,
identification, authentication, authorization, and accountability.
Confidentiality - answer✔Characteristic of information whereby only those with sufficient
privileges and a demonstrated need may access it.
, ©THEBRIGHT EXAM SOLUTIONS
10/29/2024 11:24 PM
To protect the confidentiality of information, a number of measures are used, including: -
answer✔-Information classification
-Secure document (and data) storage
-Application of general security policies
-Education of information custodians and end users
-Cryptography (encryption)
Integrity - answer✔The quality or state of being whole, complete, and uncorrupted.
Availability - answer✔Occurs when users have access to information in a usable format, without
interference or obstruction.
Privacy - answer✔Information that is collected, used, and stored by an organization should be
used only for the purposes stated by the data owner at the time it was collected.
Identification - answer✔Characteristic of an information system that is able to recognize
individual users.
Authentication - answer✔Process by which a control establishes whether a user (or system) has
the identity it claims to have.
Authorization - answer✔Process that defines what the user (whether a person or computer) has
been specifically and explicitly authorized by the proper authority to do, such as access, modify,
or delete the contents of an information asset.
Occurs after the identity of a user has been authenticated.
Accountability - answer✔Occurs when a control provides assurance that every activity
undertaken can be attributed to a named person or automated process.
Ex. Audit logs
Management - answer✔The process of achieving objectives using a given set of resources.
Roles of Managers - answer✔1. Informational role: collecting, processing and using infomration
that can affect the completion of objectives
10/29/2024 11:24 PM
Ch 1 Intro to the Management of
Information Security Exam Study Guide.
Information Security Community - answer✔Protects the organization's information assets from
the many threats they face.
Information Technology Community - answer✔Supports the business objectives of the
organization by supplying and supporting IT that is appropriate to the organization's needs.
General Business Community - answer✔Articulates and communicates organizational policy and
objectives and allocates resources to the other groups.
Security - answer✔The quality or state of being secure - being free from danger. To be secure is
to be protected from the risk of loss, damage, or unwanted modification, or other hazards.
Physical Security - answer✔Protecting people, physical assets, and the workplace from various
threats, including fire, unauthorized access, and natural disasters.
Operations Security - answer✔Protecting the organization's ability to carry out its operational
activities without interruption or compromise.
Information Security (InfoSec) - answer✔The protection of information and its critical
characteristics (confidentiality, integrity, and availability), including the systems and hardware
that use, store, and transmit that information, through the application of policy, training and
awareness programs, and technology.
C.I.A Triangle - answer✔Industry standard for computer security. Characteristics are
confidentiality, integrity, and availability. The triangle has expanded to include privacy,
identification, authentication, authorization, and accountability.
Confidentiality - answer✔Characteristic of information whereby only those with sufficient
privileges and a demonstrated need may access it.
, ©THEBRIGHT EXAM SOLUTIONS
10/29/2024 11:24 PM
To protect the confidentiality of information, a number of measures are used, including: -
answer✔-Information classification
-Secure document (and data) storage
-Application of general security policies
-Education of information custodians and end users
-Cryptography (encryption)
Integrity - answer✔The quality or state of being whole, complete, and uncorrupted.
Availability - answer✔Occurs when users have access to information in a usable format, without
interference or obstruction.
Privacy - answer✔Information that is collected, used, and stored by an organization should be
used only for the purposes stated by the data owner at the time it was collected.
Identification - answer✔Characteristic of an information system that is able to recognize
individual users.
Authentication - answer✔Process by which a control establishes whether a user (or system) has
the identity it claims to have.
Authorization - answer✔Process that defines what the user (whether a person or computer) has
been specifically and explicitly authorized by the proper authority to do, such as access, modify,
or delete the contents of an information asset.
Occurs after the identity of a user has been authenticated.
Accountability - answer✔Occurs when a control provides assurance that every activity
undertaken can be attributed to a named person or automated process.
Ex. Audit logs
Management - answer✔The process of achieving objectives using a given set of resources.
Roles of Managers - answer✔1. Informational role: collecting, processing and using infomration
that can affect the completion of objectives
