Unit 11 C3 - A Cyber Security Plan for a System

Which of the following are examples of the information required for each protection measure?

• Threat(s) addressed by the protection measure

• Action(s) to be taken

• Reasons for the action(s)

• Overview of technical and financial constraints

• Overview of legal responsibilities

Firewalls, routers and wireless access points can be used to support which type of protection method?

• Hardware

• Software

• Physical

• Mental

Firewalls, anti-malware, port scanning and access rights can be used to support which type of protection method?

• Hardware

• Software

• Physical

• Mental

Locks, CCTV, alarm systems and back-ups can be used to support which type of protection method?

• Hardware

• Software

• Physical

• Mental

Used for risks that may be too costly to deal with based on its supposed impact that it is believed to have.

Often threats classified as “Low” risk may be left in this way.

• Risk acceptance

• Risk avoidance

• Risk transfer

Potential technical and financial constraints might include which of the following?

• Difficulties in any technical tasks

• Limitations in available hardware or software required

• Requirements of staff to perform certain protection measures

• Computer Misuse Act

Potential Cyber Plan action items for network security

• Develop strong password policies

• Secure and encrypt your company’s Wi-Fi

• Set up a spam email filter

• Dispose of rubbish securely

Potential Cyber Plan action items for email usage

• Develop an email usage policy

• Secure and encrypt your company’s Wi-Fi

• Set up a spam email filter

• Regularly update all applications

In the event of a cybersecurity breach, personnel and teams in the company’s IT, finance, legal, and other departments should be ready at a moment’s notice.

These groups are referred top as what?

• Internal stakeholders

• External stakeholders

• Internal assessment managers

• External assessment managers

Policy Development and Management should establish which of the following items?

• Security roles and responsibilities

• An employee Internet usage policy

• A social media policy

• Lunch rota system