Cissp Lesson 7

Front 1

Operatoins Security (OPSEC)

Back 1

Three key elements: protecting resources, controling privileged entry, and controlling hardware.

Front 2

Name 6 OPSEC Controls

Back 2

1. Preventive - AV software, fiel encryption, & user registration.
2. Detective - To identify and react(firewalls, IDS, audit logs)
3. Corrective - to restore after attack(security awareness, badge access)
4. Deterrent
5. Application - to monitor installatoin and updates.
6. Transaction - to protect input, processing, and output.

Front 3

Name 3 OPSEC Control Categories

Back 3

1. Administrative - personnel screening, separation of duties, record retention. derived from policies and procedures, legal.
2. Operational - resource protection, hardware, software, access. Includes implementation of procedures.
3. Media - dating media, identify creator, retention date, media name, change control record, data backups.

Front 4

Security Auditing

Back 4

Practice of checking current activity against policy.

Front 5

Security Audit Trail

Back 5

A Chronological electronic record of a system's performance or activity.

Front 6

Information Systems Audit and Control Association(ISACA)

Back 6

Governing body for auditing and control professionals.

Front 7

Security Monitoring

Back 7

The practice of monitoring operations controls to identify abnormal computer activity. Uses IDS, penetration testing, and violation processing.

Front 8

Problem Management

Back 8

Method of controlling problem isolation and resolution. Goal is to reduce failures and prevent reoccurrence.

Front 9

Violation Analysis

Back 9

A security monitoring technique that tracks anomalies in user activity. Uses clippling levels. A/K/A - Violation Processing or tracking.

Front 10

Clipping Levels

Back 10

A baseline of routine user activity. Typically used by HIDS.

Front 11

Accidental Loss Security Threat

Back 11

Occurs unintentionally through inadequate training or competence. Or malfunction of an application or O/S.

Front 12

Inappropriate Activities Security Threat

Back 12

Occurs through computer behavior that violates organizational policy.

Front 13

Illegal Computer Operations Security Threat

Back 13

Occurs through computer activity used for personal gain.

Front 14

Intentional Attacks Security Threat

Back 14

Occurs with malicious intent to interrupt or shut down a system. (DoS, external attacks)

Front 15

Unauthorized Entry Security Threat

Back 15

Unauthorized modification, destruction, manipulation, or denial of access.

Front 16

Security Violation

Back 16

A breach of security regulations or policies that may or may not result in a compromise. May be intentional or unintentional. Must be reported.

Front 17

Employee-related Security Countermeasure

Back 17

Separation of duties, rotating staff, security training, maintaining standards.

Front 18

Human Resource-related Security Countermeasure

Back 18

Mandatory reference and background checks, drug testing, conflict of interest disclosures

Front 19

Internet-related Security Countermeasures

Back 19

Penetration testing, port scanning, OS enumeration

Front 20

Facility-related Security Countermeasure

Back 20

Proper storage and handling of media.

Front 21

Trusted Recovery

Back 21

A protection mechanism that ensures the security of a computer system that crashes or fails. 2 key activities - preparing for a system failure and recovering from a system failure. boots up into a single user mode with security protection enabled, restores damaged files.