Exam 6: Security Management Models

The information security blueprint serves as the basis for the design,selection,and implementation of all subsequent security controls._________________________

Storage of classified documents must be accessible only to authorized individuals,which usually requires which of the following?

ISO 27002 is an international standard for computer security certification,considered to be the successor to both TCSEC and ITSEC.

Controls that are structured and coordinated within a data classification scheme that rates each collection of information as well as each user are called ____.

Deterrent controls help an organization avoid an incident._________________________

Discretionary controls are determined by a central authority in the organization._________________________

The Biba model is a state machine model that helps ensure the confidentiality of an information system by means of MACs,data classification,and security clearances._________________________

Under the Common Criteria,____ is the document describing the system being evaluated's security properties.

Covert channels are unauthorized or unintended methods of communications hidden inside a computer system._________________________

ITSEC is the international set of equivalent for evaluating computer systems,and is very similar to the TCSEC.

The principle by which members of the organization can access the minimum amount of information for the minimum amount of time necessary to perform their required duties is known as ____.

The individual categories of data classification (Unclassified,Confidential,Secret etc.)are also called ____.

ISO/IEC 27001 provieds implementation details using a(n)____________________ cycle.

Access controls are build on three key principles.List and briefly define them.

The Graham-Denning model most closely represents which of the following access control models?

Under the Biba model,the ____ property permits a subject to have read access to an object only if the security level of the subject is either lower or equal to the level of the object.

COBIT is an IT development framework and supporting toolset that allows managers to bridge the gap between control requirements,technical issues,and design specifications.

The Clark-Wilson model,designed for commercial environments is a(n)____ model.

Under the Common Criteria for IT Security Evaluation,a(n)Security Target is the system being evaluated._________________________

An Automated Teller Machine (ATM)is an example of a ____.