Official (ISC)² SSCP
Availability - Answer-Refers to the ability to access and use information systems when and as needed to
support an organization's operations.
Breach - Answer-The intentional or unintentional release of secure information to an untrusted
environment.
CMDB - Answer-A configuration management database (CMDB) is a repository that contains a collection
of IT assets that are referred to as configuration items.
Compensating Controls - Answer-Introduced when the existing capabilities of a system do not support
the requirements of a policy.
Confidentiality - Answer-Refers to the property of information in which it is only made available to
those who have a legitimate need to know.
Configuration Management (CM) - Answer-A discipline that seeks to manage configuration changes so
that they are appropriately approved and documented, so that the integrity of the security state is
maintained, and so that disruptions to performance and availability are minimized.
Availability - Answer-Refers to the ability to access and use information systems when and as needed to
support an organization's operations.
Breach - Answer-The intentional or unintentional release of secure information to an untrusted
environment.
CMDB - Answer-A configuration management database (CMDB) is a repository that contains a collection
of IT assets that are referred to as configuration items.
Compensating Controls - Answer-Introduced when the existing capabilities of a system do not support
the requirements of a policy.
Confidentiality - Answer-Refers to the property of information in which it is only made available to
those who have a legitimate need to know.
Configuration Management (CM) - Answer-A discipline that seeks to manage configuration changes so
that they are appropriately approved and documented, so that the integrity of the security state is
maintained, and so that disruptions to performance and availability are minimized.
