Security+ Day 1

refers to policies, procedures, or guidelines that define personnel or business practices

Its mantra is to make everyone accountable for security

Taking actionregarding a detected cybersecurity incident.

Used for evaluation of people or systems

a stealthy threat actor, typically a nation state , which gains unauthorized access to a computer network and remain

the possibility of something bad happening

Motives include: Political Views, Cultural/Relgious Beliefs, National Pride, Terrorist Ideology

What is– Develop and implement appropriate safeguards to ensure delivery of critical services

a person or thing likely to cause damage or danger.

any measures taken to repair damage or restore resources and capabilities to their prior state 

This enables timely discovery of cybersecurity events?

exposed to the possibility of being attacked or harmed

refers to the use of predictive analytics, user behavior analytics, or certain other analytics that extract value

This is a regulation in EU law on data protection and privacy

implemented prior to a threat designed to reduce or avoid the impact of a threat

Data should be maintained in a correct state and nobody should be able to improperly modify it.

is a mechanism that is put in place to satisfy the requirement for a security measure that is deemed too

Authorized users should be able to access data whenever they need to do so

also known as logic controls, use technology to reduce vulnerabilities in hardware and software

Examples are: Security guards,Picture IDs,Locked and dead-bolted steel doors?

The Most difficult Data type to protect?

Only authorized users and processes should be able to access or modify data

centralized function within an organization to continuously monitor and improve an organization's security posture

They know all your systems intimately

What do we use to get back to normal?

Motives include: Money, Money, & Money

What is used to develop an organizational understanding to manage cybersecurity risk .

Motives include: Fun, Chaos, Revenge

provides a common language for understanding, managing, and expressing cyber security risks

a thing that discourages or is intended to discourage someone from doing something.