CCA - Chapter 1 – Introduction 2024.

CCA - Chapter 1 – Introduction 2024. Breach - ANSWER Any incident that results in unauthorized access of data, applications, services, networks and/or devices by bypassing their underlying security mechanisms. A security breach occurs when an individual or an application illegitimately enters a private, confidential or unauthorized logical IT perimeter. Hacking/Hacker - ANSWER An unauthorized user who attempts to or gains access to an information system. Threat - ANSWER Any circumstance or event with the potential to adversely impact organizational operations (including mission, functions, image, or reputation), organizational assets, or individuals through an information system via unauthorized access, destruction, disclosure, modification of information, and/or denial of service. Also, the potential for a threat source to successfully exploit an information system vulnerability. Phishing - ANSWER The fraudulent act of acquiring private and sensitive information, such as credit card numbers, personal identification and account usernames and passwords. (Pronounced like "fishing".) Spear phishers use highly personalized information in emails to try to gain your trust. Identity Theft - ANSWER The unauthorized collection of personal information and its subsequent use for criminal reasons such as to open credit cards and bank accounts, redirect mail, set up cell phone service, rent vehicles and even get a job. Exploit - ANSWER A general term for any method used by hackers to gain unauthorized access to computers, the act itself of a hacking attack, or a hole in a system's security that opens a system to an attack. In short, it is the use of an identified vulnerability to violate security objectives such as confidentiality, integrity and availability. Ransomware - ANSWER Using malware to lock up a set of computer files and asking for payment to the offender to undo the malware control of the computer files. (analogy to kidnapping and ransom). Information System - ANSWER Describes the collection, validation, storage, calculating, sorting and transmission of data across an organization