ISA 1 - QUIZ 2

It protects the physical items, objects, or areas of an organization from unauthorized access and misuse.

• Operations security

• Physical security

• Communications security

It protects the individual or group of individuals who are authorized to access the organization and its operations.

• Operations security

• Physical security

• Personal security

It protects the details of a particular operation or series of activities.

• Operations security

• Physical security

• Personal security

It protects the organization9s communications media, technology, and content.

• Operations security

• Communication security

• Personal security

It protects the networking components, connections, and contents.

• Operations security

• Communication security

• Network security

The quality or state of preventing disclosure or exposure to unauthorized individuals or systems.

• Confidentiality

• Integrity

• Utility

Enables users who need to access information to do so without interference or obstruction and in the required format. The information is said to be available to an authorized user when and where needed and in the correct format.

• Confidentiality

• Availability

• Utility

The quality or state of having value for some purpose or end. Information has value when it serves a particular purpose.

• Utility

• Availability

• Confidentiality

Responsible for using resources and preserving availability, integrity, and confidentiality of assets; responsible for adhering to security policy.

• Users

• Data Owners

• IS Auditors

A function that has "custody" of the system/databases, not necessarily belonging to them, for any period of time. Usually network administration or operations (those who normally operate the systems for the owners).

• Users

• Data Owners

• IS Auditors