CYSA EXAM REVISED 2023.. LATEST UPDATE

CYSA EXAM REVISED 2023.. LATEST UPDATE Confidentiality - ANSWER How secure does the data need to be? How secure is the information? Falure of condifentiality occurs if someone can obtain the a view the data Confidentiality best practices - ANSWER Physical Protections -Locked doors, fences, security guards, security cameras, Electronic Protections -Encryption (storage and in transit), passwords, firewalls, integrity - ANSWER How correct is the information? Has the data been modified? Failure of integrity occurs if someon modifies the data being stored or when it is in transit integrity best practices - ANSWER Hshing of files and informtion Checksums during data transimmions avaibility - ANSWER How much uptime is the system providing? Is the data accessible by users at all times? Failure of avaiability occurs if the data cannot be accessed by the end user acaibility best practices - ANSWER Redundancy in the system design, including compnents and data paths Backup strategies and disaster recovery plan Assets - ANSWER Information or data Network equipment servers/comuters software personnel processes vulnerability - ANSWER Any weakness in the system design implementation, software code, or lack of preventative mechanisms Internal factors like Software bugs, Misconfiured software Misconfigured network devices improper physical security Threats - ANSWER Any condition that can causes harm, loss, damage, or compromise of asset Cannon control threats, but can be mitigated. Nature Disasters, Cyber Attacks Breach of integrity of daya Discolusre of confidential data Malware Risk - ANSWER Probability or likelihood of realization of a threat risk assessment - ANSWER assessments measure your current level of risk based on threats, vulnerabilities, and mitigations in place NIST 800-30 NIST SP 800-30 - ANSWER STEP 1 -NIST 800-30 - ANSWER Prepare for the assessment STEP 2 -NIST 800-30 - ANSWER Conduct Assessment STEP 3 -NIST 800-30 - ANSWER Communicate Result STEP 4 -NIST 800-30 - ANSWER Maintain Assessment Adversarial Threats - ANSWER People based that are threats Trusted insideers Competitors Suppliers Customers Business partners Nations States Accidental Threats - ANSWER Occurs when someone makes a mistake that hurts the security of the system • Example: • System administrator accidently takes servers offline causing loss of availability • Amazon Web Services (Feb 2017) • Technician utilized a SOP to take a small number of servers offline, but input the command incorrectly • Caused a large number of servers to go offline Structural Threats - ANSWER Occurs when equipent, software, or environmental controls fails Software failure (OS bug or crash) IT server fails due to hard drive failureServers fail due to overheating (HVAC fail) Environmental Threats - ANSWER Occurs whe nnatural or man-made disasters occurs Fires Flooding Severs storms Loss of power from the city power grid Fiber or telecommunication lines cut Risk Assessment best practices - AN