Chapters 1&2 CyberSecurity

A method for risk analysis that is based on the assignment of a descriptor such as low, medium or high

Putting security controls in place to reduce the possible impact and/or likelihood of a specific risk.

Any information that can be used to distinguish or trace an individual’s identity

Zero Day is a system vulnerability with the potential of exploitation without risk of detection or prevention

The ability of computers and robots to simulate human intelligence and behavior

Probability is the right of an individual to control the distribution of information about themselves.

Controls implemented through policy and procedures.

Penetration Testing is a security event where an intruder gains access to a system without authorization

a professional organization that sets standards for telecommunications, computer engineering and similar disciplines.

The right or a permission that is granted to a system entity to access a system resource.

A possible event which can have a negative impact

The organization that sets the standards for the Internet through a process of collaboration and consensus.

The mitigation of violations of security policies and recommended practices.

The property that data has not been altered in an unauthorized manner.

The degree to which an organization depends on the information system for the success of a business function

A documented, lowest level of security configuration allowed by a standard or organization

Risk Treatment is the determination of the best way to address an identified risk.

The process and act of converting the message from its plaintext to ciphertext.

A breach is where a person other than an authorized user accesses personally identifiable information

U.S. federal government organization that addresses the measurement infrastructure within science and technology efforts