Managing Security Risks: Quiz 3

N_________ is a voluntary framework that consists of standards, guidelines, and best practices to manage cybersecurity risks.

The management of cybersecurity risk and its effect on an organization's people and assets

• Identity

• Protect

• Detect

• Respond

• Recover

The process of returning affected systems back to normal operation

• Identity

• Protect

• Detect

• Respond

• Recover

The strategy used to defend an organization through the implementation of policies, procedures, training, and tools that help mitigate cybersecurity threats

• Identity

• Protect

• Detect

• Respond

• Recover

Finding potential security incidents and improving monitoring capabilities to increase the speed and efficiency of discoveries.

• Identity

• Protect

• Detect

• Respond

• Recover

Making sure that the proper procedures are used to contain, neutralize, and analyze security incidents, and implement improvements to the security process.

• Identity

• Protect

• Detect

• Respond

• Recover

Op_____________ We___________ Ap______________ Se______________ Pr_______________

OWASP

Refers to all the potential vulnerabilities a threat actor could exploit.

• Minimize attack surface area

• Principle of least privilege

• Defense in depth

• Separation of duties

• Keep security simple

OWASP

Users have the least amount of access required to perform their everyday tasks.

• Minimize attack surface area

• Principle of least privilege

• Defense in depth

• Separation of duties

• Keep security simple

OWASP

Organizations should have varying security controls that mitigate risks and threats.

• Minimize attack surface area

• Principle of least privilege

• Defense in depth

• Separation of duties

• Keep security simple