OFFICIAL (ISC)² SSCP
OFFICIAL (ISC)² SSCP -
CHAPTER 1: INTRODUCING
SECURITY AND ALIGNING
ASSET MANAGEMENT TO RISK
MANAGEMENT QUESTIONS
AND ANSWERS 2024/2025
Availability - ANS >>Refers to the ability to access and use information systems when and as needed to
support an organization's operations.
Breach - ANS >>The intentional or unintentional release of secure information to an untrusted
environment.
Commercial off-the-shelf (COTS) - ANS >>A Federal Acquisition Regulation (FAR) term for commercial off-
the-shelf (COTS) items, that can be purchased in the commercial marketplace and used under
government contract.
Confidentiality - ANS >>Refers to the property of information in which it is only made available to those
who have a legitimate need to know.
Countermeasure - ANS >>An added-on reactive security control; a safeguard.
Defense in depth - ANS >>Provision of several overlapping subsequent limiting barriers with no respect
to one safety or security threshold, so that the threshold can only be surpassed if all barriers have failed.
Degaussing - ANS >>A technique of erasing data on disk or tape (including video tapes) that, when
performed properly, ensures that there is insufficient magnetic remanence to reconstruct data.
1
OFFICIAL (ISC)² SSCP -
CHAPTER 1: INTRODUCING
SECURITY AND ALIGNING
ASSET MANAGEMENT TO RISK
MANAGEMENT QUESTIONS
AND ANSWERS 2024/2025
Availability - ANS >>Refers to the ability to access and use information systems when and as needed to
support an organization's operations.
Breach - ANS >>The intentional or unintentional release of secure information to an untrusted
environment.
Commercial off-the-shelf (COTS) - ANS >>A Federal Acquisition Regulation (FAR) term for commercial off-
the-shelf (COTS) items, that can be purchased in the commercial marketplace and used under
government contract.
Confidentiality - ANS >>Refers to the property of information in which it is only made available to those
who have a legitimate need to know.
Countermeasure - ANS >>An added-on reactive security control; a safeguard.
Defense in depth - ANS >>Provision of several overlapping subsequent limiting barriers with no respect
to one safety or security threshold, so that the threshold can only be surpassed if all barriers have failed.
Degaussing - ANS >>A technique of erasing data on disk or tape (including video tapes) that, when
performed properly, ensures that there is insufficient magnetic remanence to reconstruct data.
1
