stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Regulations and Compliance Flashcards | StudBud
Explore
/
Regulations and Compliance
Regulations and Compliance
25 terms
·
StudBud Administration
·
36 plays
Frameworks, Policies, Controls, and Procedures
Flashcards
25 cards
F
Practice quiz
P
Host live
L
Questions
25
Answers
1
a process management development standard developed by the office of management and budget in OMB circular A-130
ITIL
PII
TOGAF
CAPWAP
2
Does a trade secret need to be tangible to be covered by the Economic Espionage Act of 1996?
No
Yes
3
which law allows law enforcement to use emails, phone calls, medical records, and financial records to investigate?
Basel II
USA Patriot Act
US Federal Sentencing Guidelines of 1991
Computer Security Act of 1987
4
what is NIST?
national institute of standards and time
national institute of standards and technology
national institute of security and technology
national intelligence and surveillance task force
5
Which is not a domain of COBIT?
Acquire and Implement
Exacerbate and Escalate
Deliver and Support
Plan and Organize
6
Harbor privacy principles help guide U.S. organizations in compliance with EU principles on Privacy
True
False
7
what is used to inform users of the actions that are allowed and those that are not allowed?
AUP
A SWITCH
MOB
SOX
8
Who developed the NIST SP 800-53
EU
US DOJ
USDA
US Dept of Commerce
9
the de facto standard of best practices for IT service Management
COBIT
ITIL
TOGAF
PCI-DSS
10
a method for using specific standards to enable automated vulnerability management, measurement, and compliance
SOX
SCAP
MBSA
SIEM
11
which regulation pertains to federal agencies and provisions requirements for risk assessments, trainings, IR, and more
SOX
HIPPA
FISMA
COBIT
12
publication that describes a voluntary cybersecurity structure for organizations apart of the critical infrastructure
ISO
CSF
ISMS
COBIT
13
Which of the following is not a NIST SP 800-53 Control Family?
Personnel Security
Contingency Planning
Benefits Enrollment
Access Control
14
which legislation provides guidelines for securing all financial information and prohibits sharing info with 3rd parties
GLBA
BASEL II
HIPPA
FISA
15
What is the ISO ?
International Search Organization
International Standards Organization
International Security Organization
Internation Organization for Standardization
16
Which law makes use of encryption technologies for criminal activities a federal offense?
Healthcare and Education Reconcilliation Act of 2010
Federal Information Security Management Act (FISMA)
Economic Espionage Act of 1996
United States Federal Sentencing Guidelines of 1991
17
an enterprise security architecture framework that uses the six communication q's of (what, where, when, why, who, & how
ITIL
TOGAF
SABSA
COBIT
18
what is a data haven?
that new spot on 3rd avenue
media protection
a country trying to attract companies looking to collect data
entity that conforms to EU requirements surrounding privacy
19
a law that enhances investigatory tools that law enforcement can use
SOC
USA PATRIOT Act
HIPPA
FISMA
20
SOX
Samm-Leach Intersectional
Paul Sarbanes Transit Center
Red Sox
Sarbanes-Oxley Act
21
Affects organizations that are publically traded, stipulates accounting and financial reporting
HIPPA
FISMA
SOX
PCI-DSS
22
an enterprise architecture framework that helps design, implement, and govern enterprise information architecture
NIST
TOGAF
COBIT
SANS
23
outlines security controls development framework into technical, operations, and management domains
SANS 305
FISMA 2002
ISO/IEC 27000
NIST SP 800-53
24
uses a process model to subdivide IT into four domains
COBIT
NIST
ISO
HIPPA
25
this act of 1986 extended govt restrictions on wiretaps to include electronic data and stored communications data
GLBA
PCI DSS
FISA
ECPA
