Policy & Law

Question 1

Define Policy

Answer 1

Set of actions the government should take in order to reach its desired outcome; goals

Question 2

Define Law

Answer 2

Constitutional, statutory, and regulatory authorities set for accomplishing the goals of a policy, as well as setting limitations; requirements

Question 3

Computer Fraud and Abuse Act (CFAA)

Answer 3

• Primary federal anti-hacking law

Question 4

Digital Millennium Copyright Act (DCMA)

Answer 4

• Prevents making copies of copyright work

- Prevents researcher and good hackers (aka penetration testers) from finding vulnerabilities before bad hackers

Question 5

Posse Comitatus Act

Answer 5

• Prohibits use of military to enforce domestic civilian laws

Question 6

Section 5 of Federal Trade Commission Act

Answer 6

• Prohibits unfair and deceptive trade practices

* Includes poor or misrepresented data security

Question 7

Agencies responsible for Cyber Security

Answer 7

• Dept. of Justice
• Dept. of Homeland Security
• Dept. of Defense

Question 8

NIST Framework (5 aspects) DRRIP

Answer 8

• Detect
• Respond
• Recover
• Identify
• rProtect