Share CBS700
Save to Folder
What does CIA stand for in cybersecurity
Confidentiality, Integrity, Availability
Which ISO standard can an organization get CERTIFIED against?
ISO 27001
What is the correct definition of a "vulnerability"
A flaw or weakness that could be exploited
Which framework organizes cybersecurity around: Identify, Protect, Detect, Respond, Recover?
NIST CSF
PCI DSS applies to which organizations
Any organization that stores, processes, or transmits cardholder data
What language does ISO 27001 use, and what does it mean?
"Shall" — mandatory requirements
Which is a cybersecurity DILEMMA described in the chapter?
User needs vs. security requirements
Which organization publishes the ISO/IEC 27000 family of standards
ISO and IEC jointly
What is the definition of "availability" in the CIA Triad
The system is accessible and usable upon demand by authorized entities
What does NIST stand for
National Institute of Standards and Technology
Which body publishes COBIT
ISACA
The CIS Critical Security Controls are based on what
Real-world attack data and proven defences
What is "non-repudiation"
Ensuring neither sender nor recipient can deny their involvement
ISO 27002 uses which type of language?
"Should" — advisory
Which NIST CSF function involves identifying what assets you have and what risks exist?
Identify
What is the difference between a standard and a regulation?
Standards are voluntary best practices; regulations are legally mandated
