Chapters 1&2 CyberSecurity

Risk Treatment is the determination of the best way to address an identified risk.

A possible event which can have a negative impact

Penetration Testing is a security event where an intruder gains access to a system without authorization

A breach is where a person other than an authorized user accesses personally identifiable information

Any information that can be used to distinguish or trace an individual’s identity

The right or a permission that is granted to a system entity to access a system resource.

The ability of computers and robots to simulate human intelligence and behavior

Putting security controls in place to reduce the possible impact and/or likelihood of a specific risk.

Controls implemented through policy and procedures.

The degree to which an organization depends on the information system for the success of a business function

The mitigation of violations of security policies and recommended practices.

Probability is the right of an individual to control the distribution of information about themselves.

The process and act of converting the message from its plaintext to ciphertext.

U.S. federal government organization that addresses the measurement infrastructure within science and technology efforts

The organization that sets the standards for the Internet through a process of collaboration and consensus.

A method for risk analysis that is based on the assignment of a descriptor such as low, medium or high

A documented, lowest level of security configuration allowed by a standard or organization

a professional organization that sets standards for telecommunications, computer engineering and similar disciplines.

Zero Day is a system vulnerability with the potential of exploitation without risk of detection or prevention

The property that data has not been altered in an unauthorized manner.