security admin

Question 1

The three As

Answer 1

Authentication, Authorization, Accountability

Question 2

Service Letter Agreements

Answer 2

Formal contract between organization and vendor

Question 3

Memorandum of Understanding

Answer 3

Agreement between two parties on the shared actions to be taken– AKA Letter of Intent (think: what an athlete signs to commit to a school)

Question 4

Interconnection Security Agreement

Answer 4

extension of memorandum of understanding that is more technical (like outlining security responsibilities of organizations)

Question 5

General Data Protection Regulation

Answer 5

• something the us should have but its basically consent to process personal data (currently used in the EU)
• also if there is a data breach, company must tell people within 72 hours and guess how many people were affected

Question 6

functional policies

Answer 6

Support the organizational (overall) policy
Acceptable Use
Email Use
Wireless Use
Antivirus
Firewall
Extranet
Interconnection 
Host Security