Transcription of Sunflower CISSP
{{id}} {{{paragraph}}}
CISSP Summary Version Maarten de Frankrijker, CISSP . Revised by Christian Reina, CISSP . Revised by Steve Warnock __..-/ \-. ( \__/ ). /` ;;\.-`\. \ _.\;;/._ /. ( / \ ). '-\__/-'.-, , \\ (-. ). |\_ ||/.-`. \'.\_ |;`. '--,\|| , `;| _/|. // _/.'/. //_/,--'. ||'-`. Domain 1: Security and Risk Management Concepts (10). CIA. DAD - NEGATIVE -(disclosure alteration and destruction). Confidentiality - prevent unauthorized disclosure, need to know, and least privilege. Assurance that information is not disclosed to unauthorized programs, users, processes, encryption, logical and physical access control, Integrity - no unauthorized modifications, consistent data, protecting data or a resource from being altered in an unauthorized fashion Availability - reliable and timely, accessible, fault t
Maximum, Tolerable Downtime (MTD) ... The primary goal of risk management is to reduce risk to an acceptable level. Step 1 – Prepare for Assessment (purpose, scope, etc.) Step 2 – Conduct Assessment • ID threat sources and events • ID vulnerabilities and predisposing conditions
Domain:
Source:
Link to this page:
Please notify us if you found a problem with this document:
{{id}} {{{paragraph}}}