ISC2 CC Domain 1: Security Principals

An Asset

is something in need of protection

A Vulnerability

A gap or weakness in protection efforts

A Threat

is something or someone that aims to exploit a vulnerability to thwart protection efforts

Threat Vectors

the technique and approach of the attack

Vulnerability

A gap or weakness in an organization’s protection of valuable assets

Organizations with a presence in multiple jurisdictions must comply with what?

The most restrictive regulations

Who is responsible for identifying risk?

All employees in an organization

What does this photo depict?

Governance

What are 2 examples of regulations and laws?

GDPR and HIPAA

GDPR

General Data Protection Regulation

HIPAA

Health Insurance Portability and Accountability Act

What are 2 examples of standards?

The International Organization for Standardization (ISO) and The National Institute of Standards and Technology (NIST)

What 2 standards involve communication protocols?

The Internet Engineering Task Force (IETF) and The Institute of Electrical and Electronics
Engineers (IEEE)

What is a policy?

A broad but not detailed plan of direction for a specific part of an organization

What do procedures define?

The explicit, repeatable activities necessary to accomplish a specific task or set of tasks

What is the CIA Triad?

Confidentiality, Integrity and Availability

What is the GDPR?

An EU multinational law that regulates how companies handle private data

What are the 3 methods of authentication?

Something you know, Something you are and Something you have

What is PII?

Personal Identifiable Information