Exam 1: Introduction to Information Security

A breach of possession always results in a breach of confidentiality.

The ____ is a methodology for the design and implementation of an information system in an organization.

Direct attacks originate from a compromised system or resource that is malfunctioning or working under the control of a threat._________________________

Describe the multiple types of security systems present in many organizations.

Hardware is often the most valuable asset possessed by an organization and it is the main target of intentional attacks.

MULTICS stands for Multiple Information and Computing Service._________________________

A(n)_________________________ is a group of individuals who are united by similar interests or values within an organization and who share a common goal of helping the organization to meet its objectives.

____ is the predecessor to the Internet.

In file hashing,a file is read by a special algorithm that uses the value of the bits in the file to compute a single large number called a ____ value.

In information security,salami theft occurs when an employee steals a few pieces of information at a time,knowing that taking more would be noticed - but eventually the employee gets something complete or useable._________________________

____ of information is the quality or state of being genuine or original.

Risk evaluation is the process of identifying,assessing,and evaluating the levels of risk facing the organization,specifically the threats to the organization's security and to the information stored and processed by the organization._________________________

A famous study entitled "Protection Analysis: Final Report" was published in ____.

A computer is the ____________________ of an attack when it is the target entity.

____ security addresses the issues necessary to protect the tangible items,objects,or areas of an organization from unauthorized access and misuse.

To achieve balance - that is,to operate an information system that satisfies the user and the security professional - the security level must allow reasonable access,yet protect against threats.

Information security can be an absolute.

Organizations are moving toward more ____-focused development approaches,seeking to improve not only the functionality of the systems they have in place,but consumer confidence in their product.

The roles of information security professionals are aligned with the goals and mission of the information security community of interest.

The ____ model consists of six general phases.