Compare and Contrast Information Security Roles Topic 1A and 1B

what is a Security operations center?

+ is a location where security professionals monitor and protect critical information assets across another business function. + Difficult to establish, maintain and finance. Usually for larger companies

Security Control Function Types - Preventative

- Acts to eliminate or reduce that an attack can succeed. - Preventative operates before an attack can take place Ex. Access Control List configured on fire walls Ex. Standard Operating Procedure (SOP) act as administrative versions of preventative controls

what is DevSecOps

-the principle that security is a primary consideration at every stage of software development and deployment. -Security considerations need to be made during requirement and planning phases, not grafted at the end

what is Development and Operations (DevOps)

A set of practices, tools, and a cultural philosophy that automates and integrates developers and system administrators. + IT personnel and developers can build, set and release software faster and more reliably

what is a cyber security framework?

A tool to organize & improve your cyber security program. Helps organizations build & improve their cyber security posture.

what is an incident response team?

Acts as a single point-of-contact for the notifications of security incidents. + can be handled by the SOC or established Independent business Cyber Incident Response Team (CIRT), Computer Security Incident response team (CSIRT), Computer emergency Response Team (CERT.

Security Control Function Types - Corrective

Acts to eliminate or reduce the impact of an intrusion event. - Used after an attack Ex. Backup system can restore data that was damaged during an intrusion Ex. Patch management systems

What is defense in depth?

An attacker must get past multiple security controls to fully compromise a network.

Non-repudiation

Assurance someone cannot deny the validity of so something.

the ___ requires federal agencies to develop security policies for computer systems that process confidential information

Computer Security Act

Security Control Function Types - Deterrent

Control may not physically or logically prevent access, but psychologically discourages an attacker from attempting an intrusion. Ex. Signs, warnings of legal penalties against trespass or intrusion

Security Control Function Types - Physical

Controls such as alarms, gateways, locks, lighting, security cameras and guards that terror and detect access to premises and hardware are often classed separately.

What are security control?

Designed Items to give a system or data asset the properties of confidentiality, integrity, availability and non-reputation.

What are the parts of the NIST Cybersecurity Framework?

Identify Protect Detect Respond Recover

Cybersecurity Framework - Protect

Implement appropriate safeguards to ensure protection of the enterprises assets.

Security Controls - Technical Controls

Implemented as systems. Firewalls, anti-virus software, and logical controls, etc.

What is a security policy?

Is a formalized statement that defines how security will be implemented within an organization

what is a Cybersecurity Framework (CSF)?

Is a list of activities and objectives undertaken to mitigate risks. Focuses solely on IT Security

Cybersecurity Framework - Respond

Is to identify, analyze, contain, and eradicate threats to systems and data security.

Security Control Function Types - Detective

May not prevent or deter access, but it will identify and record any attempted or successful intrusion. - Operates during the progress of an attack Ex. Logs provide detective Control

Confidentiality

Means that certain information should only be known to certain people.

Availability

Means that informations is accessible to those authorized to view or modify it.

Integrity

Means the data is stored and transferred as intended and that any modification is authorized.

What is NIST and what is it responsible for?

National Institute for Standards and Technology, responsible for issuing the Federal Information Processing Standards (FIPS).

What is NIST Risk Management Framework (RMF)?

Pre dates the CSF, focuses on practical cybersecurity for businesses. RMF is more prescriptive and principle intended for use by federal agencies.

What are the security control function types?

Preventive, Detective, Corrective, Physical, Deterrent and Compensating

What is Information Security?

Refers to the protection of data resources from unauthorized access, attack, theft and damage.

Security Control Function Types - Compensating

Serves as a substitute for principal control as recommended by a security standard and afford the same level of protection but used a different methodology or technology.

What are the categories of security control?

Technical, Operational, and managerial

What describes a security policy?

The means the organization will take to protect the confidentiality, availably and integrity of sensitive data and resources.

Cybersecurity Framework - Recover

To implements cybersecurity resilience to restore systems and data if other controls are unable to prevent attacks.

Cybersecurity Framework - Detect

To preform ongoing, proactive monitoring to ensure that controls are effective and capable of protecting against new types of threats.

Cybersecurity Framework - Identify

What process and assess need protection. Is used to evaluate risks, threats, and vulnerabilities and reccomend security control to mitigate them

Security Controls - Operational Control

is implements primary by people rather than systems. Security guards, training programs, policies, etc. "Controls People"

What is cyber security?

the process of protecting network, devices and data from unauthorized access and practice of ensuring confidentiality, integrity, availability of information.