Sec+ Day 1 701

Only authorized users and processes should be able to access or modify data

Deceptive emails are designed to trick recipients into revealing personal information

This is where you exposed to weakness

a stealthy threat actor, typically a nation state , which gains unauthorized access to a computer network and remain

What is used to develop an organizational understanding to manage cybersecurity risk .

refers to policies, procedures, or guidelines that define personnel or business practices

a mechanism that is put in place to satisfy the requirement for a security measure that is deemed too costly/difficult

a thing that discourages or is intended to discourage someone from doing something.

also known as logic controls, use technology to reduce vulnerabilities in hardware and software

Luring victims with attractive offers or downloads that turn out to be malicious.

Motives include: Fun, Chaos, Revenge

any measures taken to repair damage or restore resources and capabilities to their prior state 

This enables timely discovery of cybersecurity events?

Used for evaluation of people or systems

Its mantra is to make everyone accountable for security

entry points that a malicious actor can exploit to gain unauthorized access, disrupt operations, or steal data.

Authorized users should be able to access data whenever they need to do so

Motives include: Money, Money, & Money

provides a common language for understanding, managing, and expressing cyber security risks

What is– Develop and implement appropriate safeguards to ensure delivery of critical services

Data should be maintained in a correct state and nobody should be able to improperly modify it.

implemented prior to a threat designed to reduce or avoid the impact of a threat

A person or thing likely to cause damage or danger

centralized function within an organization to continuously monitor and improve an organization's security posture

relies on a group of targets that use an unsecure third-party website.

Motives include: Political Views, Cultural/Relgious Beliefs, National Pride, Terrorist Ideology

Examples are: Security guards,Picture IDs,Locked and dead-bolted steel doors?

The possibility of something bad happening

Taking action regarding a detected cybersecurity incident.

What do we use to get back to normal?

They know all your systems intimately