Chapter 19: Measuring Security

Question 1

KPI

Answer 1

key performance indicator; significant in showing the performance of an ISMS compared to its stated goals

Question 2

KRIs

Answer 2

key risk indicators; measure the risk inherent in performing a given action or set of actions

Question 3

drive-by download

Answer 3

automatic attack triggered simply by visiting a malicious website

Question 4

management review

Answer 4

formal meeting where senior organizational leaders determine whether the information security management systems are effectively accomplishing their goals

Question 5

vulnerability remediation after an organizational security assessment

Answer 5

requires the support of everyone from the top of the organization; organizational (as opposed to system-specific) assessments will not just involve a software patch