Sec+ 701 Day 8

Process for identifying, assessing, & mitigating vulnerabilities & threats

a person or thing likely to cause damage or danger?

The overall process of reducing exposure to or the effects of risk factors

means assigning risk to a third party, such as an insurance company

This Team Attacks

This would simulate an external Threat

means that you stop doing the activity that is risk-bearing

means that you stop doing the activity that is risk-bearing

This is 2 teams working together

not likely to alert the target of the investigation as it means querying publicly available information

What is the formula for Loss

the amount of data loss a system can sustain

This Team Moderates

An Subjective Measure is ______

In simple terms, _______ is the possibility of something bad happening.

Backs up everything since the last full backup

This would simulate the behavior of a privileged insider

The system can have failures and continue to provide service

the period of time following a disaster that a system may remain offline

percentage of time that the system is online, usually measured over a year Information is provided in the SLA

This Team Defends

longest period of time that an outage may occur without causing irrecoverable business failure

This would simulate the behavior of an unprivileged insider

This backup type does not clear the archive bit

detailed study of business activities, dependencies, & infrastructure

the company cannot function without, most importantthese must be restored 1st

An Objective Measure is ______

This will expose the weakness

has more risk of detection. techniques might involve gaining physical access to premises or using

means that no countermeasures are put in place either because the level of risk does not justify the cost

the process of assessing what losses might occur for a range of threat scenarios.

This will exploit the weakness