Exin Information Security Foundation based on ISOIEC 27002 Set 1

1.

You work for a large organization. You notice that you have access to confidential information that you should not be able to access in your position. You report this security incident to the helpdesk. The incident cycle isinitiated. What are the stages of the security incident cycle?

Threat, Damage, Incident, Recovery Threat, Damage, Recovery, Incident Threat, Incident, Damage, Recovery Threat, Recovery, Incident, Damage

2.

Your organization has an office with space for 25 workstations. These workstations are all fully equipped and in use. Due to a reorganization 10 extra workstations are added, 5 of which are used for a call centre 24 hours per day. Five workstations must always be available. What physical security measures must be taken in order to ensure this?

Obtain an extra office and set up 10 workstations. You would therefore have spare equipment that can be used to replace any non-functioning equipment. Obtain an extra office and set up 10 workstations. Ensure that there are security personnel both in the evenings and at night, so that staff can work there safelyand securely. Obtain an extra office and connect all 10 new workstations to an emergency power supply and UPS (Uninterruptible Power Supply). Adjust the access controlsystem to the working hours of the new staff. Inform the building security personnel that work will also be carried out in the evenings and at night. Obtain an extra office and provide a UPS (Uninterruptible Power Supply) for the five most important workstations.

3.

What is a risk analysis used for?

A risk analysis is used to express the value of information for an organization in monetary terms. A risk analysis is used to clarify to management their responsibilities. A risk analysis is used in conjunction with security measures to reduce risks to an acceptable level. A risk analysis is used to ensure that security measures are deployed in a cost-effective and timely fashion.

Exin Information Security Foundation based on ISOIEC 27002 Set 1

Congratulations

COMPANY

Products

OTHERS

Partner

Exin Information Security Foundation based on ISOIEC 27002 Set 1

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner