Definition

Question 1

Policies

Answer 1

High Level statements about the behavior and management intent.

Question 2

Standards

Answer 2

Statements about boundaries

Question 3

Procedures

Answer 3

Operating procedures

Question 4

Guidelines

Answer 4

Helpful for use with procedures and new technologies

Question 5

Types of Controls

Answer 5

IT Controls
Non IT Controls
Countermeasures
Layered- Defenses - Defense in depth

Question 6

Types of Layered- Defenses - Defense in depth

Answer 6

Prevention
Containment
Detection and notification
Reaction
Evidence collection and tracking
Recovery and restoration