- Encryption. …
- Antivirus software. …
- Intrusion detection systems (IDSs). …
- Firewalls. …
- Least privilege.
In which phase of the SDLC must the team create a plan to distribute and verify the distribution of the policies?
During
the implementation phase
, the team must create a plan to distribute and verify the distribution of the policies. Members of the organization must explicitly acknowledge that they have received and read the policy.
Which of the following are examples of technical control?
- Encryption. …
- Antivirus software. …
- Intrusion detection systems (IDSs). …
- Firewalls. …
- Least privilege.
What type of document is a more detailed statement of what must be done to comply with a policy?
| A detailed outline of the scope of the policy development project is created during which phase of the SecSDLC? investigation | Which type of document is a more detailed statement of what must be done to comply with a policy? standard |
|---|
Which of the following is a technical control?
Encryption, antivirus software, IDSs, firewalls
, and the principle of least privilege are technical controls.
What are the 3 types of controls?
There are three main types of internal controls:
detective, preventative, and corrective
. Controls are typically policies and procedures or technical safeguards that are implemented to prevent problems and protect the assets of an organization.
What are 2 preventative controls?
- Separation of duties.
- Pre-approval of actions and transactions (such as a Travel Authorization)
- Access controls (such as passwords and Gatorlink authentication)
- Physical control over assets (i.e. locks on doors or a safe for cash/checks)
Which type of document is a more detailed statement?
A project scope statement
is a written document that includes all the required information for producing the project deliverables. The project scope statement is more detailed than a statement of work; it helps the project team remain focused and on task.
What are the four elements that an EISP document should include?
- Network Security. …
- Application Security. …
- Risk Management. …
- Compliance Management. …
- Disaster Recovery. …
- Physical Security. …
- Identity & Access Management. …
- Incident Management.
Which of the following is the first step in the process of implementing training?
The seven-step methodology for implementing training is as follows: Step 1:
Identify program scope, goals, and objectives
. Step 2: Identify training staff. Step 3: Identify target audiences.
What are examples of policies and procedures?
- code of conduct.
- recruitment policy.
- internet and email policy.
- mobile phone policy.
- non-smoking policy.
- drug and alcohol policy.
- health and safety policy.
- anti-discrimination and harassment policy.
What is policy and examples?
Policies can be guidelines, rules, regulations, laws, principles, or directions
. … The world is full of policies—for example, families make policies like “No TV until homework is done”. Agencies and organizations make policies that guide the way they operate. Stores have return policies.
What are some examples of policies?
Examples include
government policies that impact spending for welfare, public education, highways
, and public safety, or a professional organization’s benefits plan.
What is a technical control?
Definition(s): The security controls (i.e., safeguards or countermeasures)
for an information system that are primarily implemented and executed by the information system through mechanisms contained in the hardware, software
, or firmware components of the system.
Which is not an example of technical control?
The following answers are incorrect :
Password and resource management
is considered to be a logical or technical control. Identification and authentication methods is considered to be a logical or technical control. Intrusion Detection Systems is considered to be a logical or technical control.
What are physical controls?
Physical control is
the implementation of security measures in a defined structure used to deter or prevent unauthorized access to sensitive material
. Examples of physical controls are: Closed-circuit surveillance cameras. Motion or thermal alarm systems. Security guards.
