Security Management Concepts

What is the ISC²

Code of Ethics? A set of ethical principles that every CISSP professional must follow.

What are the four ISC² Code of Ethics canons?

Protect society, Act honorably, Provide competent service, Advance and protect the profession.

Name three controls that protect Confidentiality.

Encryption, Access Control, Multi-Factor Authentication.

How is Authenticity achieved?

MFA, Certificates, Biometrics, Kerberos.

What is Security Governance?

The framework for directing and controlling an organization's security program.

What is Security Governance?

The framework for directing and controlling an organization's security program.

What is a Top-down approach?

Security initiatives begin with senior management support.

Why is senior management support important? Without leadership support, security programs are unlikely to succeed.

What are Personnel Security Policies?

Policies that reduce employee-related security risks throughout employment.

What activities occur before employment?

Background checks, reference checks, and screening.

What is a Strategic Security Plan?

A long-term plan covering 3–5 years.

What is a Tactical Security Plan?

A one-year plan supporting strategic objectives.

What is an Operational Security Plan?

A short-term plan focused on daily or monthly activities.

When should security plans be reviewed?

After organizational changes such as acquisitions, mergers, or major system changes.