Governance & Security

This group deals with communicating with external parties and in charge with media relations

Maximum allowable time for resuming critical business operations after a disruption or detecting a security incident

For IaaS, security responsibility is mostly with the provider

NIST CSF 2.0 component on Containment and eradication

This group is called in to change things such as firewall rules, perform the corrective action to minimize attacks

Information security should be prioritized over business operations.

Sets out connection to the internal network from external network and access from external network.

For mandatory implementation in an organization

Outlines procedures for updating an organization’s connectivity technology, operating systems and end-user applications

They are the recommended actions on a certain task

SECaaS is not a cloud computing service

When a security incident happens because of a physical attack, these teams need to be informed and involved

An effective incident response helps to dealing properly with legal issues that may arise during incidents

An effective incident response enables the use of information gained during past incidents for handling future incidents

Information security strategy should be aligned with the IT strategy, which is based on the business strategy

Maximum amount of time that an organization can tolerate a disruption before it becomes irreparable

Minimum level of service that must be provided to stakeholders during a disruption

NIST CSF 2.0 component on Restoration and post incident assessment

NIST CSF 2.0 component on Incident handling and analysis

The information security team should implement security plans and establish governance

Policy that specifies permision to access network resources and verification procedures

Security responsibility varies for different types of cloud computing services

Which is not a benefit of SECaaS?

Defines minimum password requirements, such as the number and type of characters used and how often they are changed

What do you call the step-by-step instructions to be followed by the employees

An effective incident response minimizes loss or theft of information and disruption of services caused by incidents.

Acceptable data loss in case of disruption. This also determines the required frequency of your backup

What do you call the general statement of management intentions

The purpose of information security is to support business goals and operations

For SaaS, security responsibility is mostly with the consumer

What are the components of the NIST Cybersecurity Framework 2.0?