At Stanford University, data is labeled according to a classification scheme that identifies information in the following way: prohibited, restricted, confidential, and unrestricted. Which of the following schemes has Stanford adopted?
Blog
It is necessary to retain information for two significant re…
It is necessary to retain information for two significant reasons: legal obligation and business needs. Data that occupies the class of __________ is comprised of records that are required to support operations, such as customer and vendor records.
An organization implements a baseline of security systems. T…
An organization implements a baseline of security systems. This action causes a mission-critical application that had previously worked to suddenly fail. Which of the following solutions best addresses the problem although it requires time and patience?
Which of the following is a type of baseline standard that i…
Which of the following is a type of baseline standard that is often created to serve the demands of the LAN-to-WAN Domain?
Of the risk management strategies, __________ refers to shar…
Of the risk management strategies, __________ refers to sharing the risk with an outside party, whereas __________ refers to reducing or eliminating the risk by applying controls.
In order to form an incident response team (IRT), an organiz…
In order to form an incident response team (IRT), an organization is required to create a charter. This document identifies the mission, goals, and authority of a committee or team. The first step in writing a charter is to determine the type of IRT model to adopt. There are several different types of IRT models. Which of the following is an IRT model that provides technical assistance to local teams on how to contain the breach?
Which of the following departments plays a significant role…
Which of the following departments plays a significant role in communicating with news media regarding an incident?
True or False? In an incident response team (IRT) charter do…
True or False? In an incident response team (IRT) charter document, the mission statement summarizes prior information on incident response and its significance to the organization.
True or False? While incident response procedures should be…
True or False? While incident response procedures should be tested, incident response policies cannot be tested.
True or False? When parts of an organization are not support…
True or False? When parts of an organization are not supporting or reacting quickly enough during an incident, it is management’s responsibility to remove barriers.