What are the highest security concerns for senior executives?
Breaches of data, theft, service interruptions, and regulatory non-compliance
These concerns are critical for IT governance.
What occurs during a data breach?
Information is compromised and utilized without the authorization of the owner.
Define service disruptions.
An unplanned event that causes the general system or major application to be inoperable for an unacceptable length of time.
What can result from failing to comply with cybersecurity regulations?
Fines and financial penalties.
What is a cyberattack?
Any kind of malicious activity that targets computer information systems, infrastructures, networks, or devices.
What is a threat agent?
An internal or external attacker that could negatively impact data security.
List types of threat agents.
- Attacker, Threat Actor, or Hacker
- Adversary
- Government-Sponsored/State-Sponsored Actors
- Hacktivists
- Insiders
- External Threats
What are network-based attacks?
Attacks that target the infrastructure of a network to gain unauthorized access or disrupt operations.
Name examples of network-based attacks.
- Backdoors and trapdoors
- Covert channels
- Denial-of-service (DoS)
- Distributed denial-of-service (DDoS)
- Man-in-the-middle (MITM)
- Ransomware
What do application-based attacks target?
Specific software or applications to gain unauthorized access or disrupt functionality.
Provide examples of application-based attacks.
- SQL injection
- Cross-site scripting (XSS)
- Race condition
- Malicious mobile code
What is a social engineering attack?
Attacks that use psychological manipulation to get employees to divulge sensitive information.
Name some examples of social engineering attacks.
- Phishing
- Spear phishing
- Business email compromise (BEC)
- Pretexting
- Catfishing
What are the stages in a cyberattack?
- Reconnaissance
- Gaining Access
- Escalation of Privileges
- Maintaining Access
- Network Exploitation and Exfiltration
- Covering Tracks
What is cloud computing?
A way for organizations to store, use, process, and share data without needing to own or manage the resources.
List risks specific to cloud computing.
- Additional industry exposure
- Cloud malware injection attacks
- Compliance violations
- Loss of control
- Theft of intellectual property
What are the risks related to mobile devices?
- Application malware
- Lack of updates
- Lack of encryption
- Physical threats
- Unsecured Wi-Fi networks
Define threat modeling.
The process of identifying, analyzing, and mitigating threats to a network, system, or application.
What is the CIA Triad?
Confidentiality, Integrity, and Availability.
List the phases of threat modeling.
- Identify assets
- Identify threats
- Perform reduction analysis
- Analyze the impact of an attack
- Develop countermeasures and controls
What does COSO stand for?
Committee of Sponsoring Organizations.
What are the five components of the COSO internal control framework?
- Control Environment
- Risk Assessment
- Control Activities
- Information and Communication
- Monitoring Activities
What is an acceptable use policy (AUP)?
A control document created to regulate and protect technology resources.
