Risk Management

Question 1

Remote Journaling

Answer 1

Continuous transmission of transaction logs to a remote location

Question 2

Incident

Answer 2

Any unplanned event that negatively impacts the confidentiality, integrity, or availability of an organization’s data that requires a response

Question 3

Business Impact Analysis (BIA)

Answer 3

Process that identifies and evaluates the effects of an organization not being able to maintain their Mission Essential Functions (MEFs)

Question 4

3-2-1 Backup Rule

Answer 4

Three copies of data
Stored across two different media types
One copy stored off-site (disconnected)

Question 5

False Acceptance Rate (FAR)

Answer 5

Measures how often unauthorized individuals are mistakenly identified as legitimate users

Question 6

False Rejection Rate (FRR)

Answer 6

Tracks how often legitimate users are wrongly denied access

Question 7

Crossover Error Rate (CER)

Answer 7

Point where the FAR and FRR are equal

Question 8

GDPR

Answer 8

EU’s General Data Protection Regulation
Individual’s can access, correct, delete, and transfer their personal data

Question 9

CCPA

Answer 9

California Consumer Privacy Act
Provides California residents with the right to know what data is being collected

Question 10

SHIELD Act

Answer 10

New York’s Stop Hacks and Improve Electronic Data Security Act
Focuses on data security, ensuring organizations take reasonable steps to protect personal data and notify individuals in the event of a breach

Question 11

Data Sovereignty

Answer 11

Refers to the principle that data is subject to the laws and regulations of the country in which it is collected and/or stored

Question 12

NIST RMF

Answer 12

Provides a method for managing risk, including categorizing information systems, selecting security controls, and monitoring effectiveness

Question 13

COSO ERM

Answer 13

Aligns risk management with business strategy, functioning like a strategic planner for risk
Emphasizes the alignment of risk management with business strategy and objectives

Question 14

OCTAVE

Answer 14

A hands-on framework designed to assess risks, threats, and vulnerabilities specific to organizational assets with a focus on IT infrastructure

Question 15

FAIR

Answer 15

A framework that focuses on quantifying risk in financial terms, enabling decision-makers to better understand the monetary impact of security threats

Question 16

Risk Assessment

Answer 16

Identifies, analyzes, and evaluates potential impact of risks and guides the implementation of mitigation strategies

Question 17

Due Diligence

Answer 17

Process of thoroughly evaluating reliability, risks, and integrity before entering into a partnership

Question 18

Due Care

Answer 18

Process of continuously taking reasonable steps to prevent harm and mitigate risks, ensuring that the operations remain secure

Question 19

Subprocessor

Answer 19

A third-party entity that a vendor or service provider outsources certain functions to