Exam 1: Introduction to Information Security

The ____________________ component of the IS comprises applications,operating systems,and assorted command utilities.

During the ____ phase,specific technologies are selected to support the alternatives identified and evaluated in the logical design.

____ presents a comprehensive information security model and has become a widely accepted evaluation standard for the security of information systems.

The Analysis phase of the SecSDLC begins with a directive from upper management._________________________

Policies are written instructions for accomplishing a specific task._________________________

Information security can begin as a grassroots effort in which systems administrators attempt to improve the security of their systems,which is often referred to as a bottom-up approach._________________________

Key end users should be assigned to a developmental team,known as the united application development team._________________________

A champion is a project manager,who may be a departmental line manager or staff unit manager,and understands project management,personnel management,and information security technical requirements.

The bottom-up approach to information security has a higher probability of success than the top-down approach.

____________________ enables authorized users - persons or computer systems - to access information without interference or obstruction and to receive it in the required format.

A(n)____________________ information security policy outlines the implementation of a security program within the organization.

Which of the following is a valid type of data ownership?

When a computer is the subject of an attack,it is the entity being attacked.

The senior technology officer is typically the chief ____________________ officer.

The investigation phase of the SecSDLC begins with a directive from upper management.

People with the primary responsibility for administering the systems that house the information used by the organization perform the ____ role.

The Security Development Life Cycle (SDLC)is a methodology for the design and implementation of an information system._________________________

The physical design is the blueprint for the desired solution.

Part of the logical design phase of the SecSDLC is planning for partial or catastrophic loss.____ dictates what steps are taken when an attack occurs.

The ____________________ of information is the quality or state of ownership or control of some object or item.