1.0 Security Concepts

Chief Security Officer (CSO)

• A person responsible for financial audits and compliance.

• Typically, the job title of the person with overall responsibility for information assurance and systems security.

• An individual who manages the company's marketing strategies.

• The head of human resources overseeing employee relations.

Development and operations (DevOps)

• A methodology that focuses solely on software development.

• A combination of software development and systems operations and refers to the practice of integrating one discipline with the other.

• A framework for managing IT projects without any operational involvement.

• A set of tools used exclusively for system administration.

Shelf

• An area that contains hardware components that may be used in the simulation.

• A place where books are stored.

• A type of furniture used for decoration.

• A storage unit for food items.

Computer incident response team (CIRT)/computer security incident response team (CSIRT)/computer emergency response team (CERT)

• Team responsible for incident response with expertise in IT, HR, legal, and marketing.

• A team that only focuses on IT security incidents.

• A group that handles marketing strategies during a crisis.

• A team that is only involved in legal matters related to incidents.

Chief Technology Officer (CTO)

• A company officer responsible for financial planning and analysis.

• A company officer with the primary role of making effective use of new and emerging computing platforms and innovations.

• A company officer who oversees human resources and employee relations.

• A company officer focused on marketing strategies and customer engagement.

Corrective

• A type of security control that acts after an incident to eliminate or minimize its impact.

• A type of security control that prevents incidents from occurring.

• A type of security control that detects incidents in real-time.

• A type of security control that provides a backup in case of data loss.

Lab simulator

• A tool that provides a virtual environment for manipulation like a real lab

• A physical device used for conducting experiments

• A software for managing laboratory inventory

• A textbook for learning laboratory techniques

Chief Information Officer (CIO)

• A company officer responsible for managing financial assets and procedures.

• A company officer with the primary responsibility of managing information technology assets and procedures.

• A company officer who oversees human resources and employee relations.

• A company officer responsible for marketing and sales strategies.

Detective

• A type of security control that acts during an incident to identify or record that it is happening.

• A method used to prevent incidents from occurring in the first place.

• A type of security control that only analyzes past incidents.

• A tool used to monitor network traffic for unusual activity.

Exhibits

• Additional information about the simulation environment that may be useful in completing the lab.

• Visual representations of data collected during the experiment.

• Instructions for setting up the laboratory equipment.

• Summary of the lab results and conclusions drawn.