Save
Busy. Please wait.
Log in with Clever
or
show password
Forgot Password?
Don't have an account?  Sign up 
Sign up using Clever
or
Username is available taken
show password


Make sure to remember your password. If you forget it there is no way for StudyStack to send you a reset link. You would need to create a new account. Your email address is only used to allow you to reset your password. See our Privacy Policy and Terms of Service.

Already a StudyStack user? Log In

Reset Password
Enter the associated with your account, and we'll email you a link to reset your password.
focusNode
Didn't know it?
click below
 
Knew it?
click below
Don't Know
Remaining cards (0)
Know
0:00
edit
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.

  Normal Size     Small Size show me how

Control Types(Ch 1)

Control Types(Ch 1 - CISSP)

TermDefinition
Administrative Control referred to as "soft controls" examples are: security documentation, risk management, personal security, training
Technical Control referred to as "logical controls" examples are: software or hardware components, firewalls, IDS, IPS,encryption etc
Physical Control put in place to protect facility, personnel or resources examples: Security Guards, Locks, Fencing, Lighting
Control Countermeasure Control put into place to mitigate a potential risk
Exposure An instance of being exposed to losses
Risk The likelihood of a threat source exploiting a vulnerability and the corresponding business impact
Threat Agent An entity that takes advantage of a vulnerability
Threat Any potential danger that is associated with the exploitation of a vulnerability
Vulnerability A weakness: a lack of a safegard
Exploit Instance of compromise
Controls Protective mechanisms to secure vulnerablilities
Secondary Risks Risk event that comes as a result of another risk response
Residual Risk The amount of risk left over after a risk response
Fallback Plan "Plan B"
Workaround Unplanned Response (for unidentified risk or when other responses don't work.)
Attack Tree The branches that are created by each decision point of an attack .
Risk Assessment A method of identifying vulnerabilities and threats and assessing the possible impacts to determine where to implement security controls.
Due Care An organization took all reasonable measures to prevent security breaches and also took steps to mitigate damages caused by successful breaches.
Due Diligence An organization investigated all vulnerabilities. This includes performing audits and assessments to ensure that the organization is protected.
Created by: Dks0512
Popular Computers sets

 

 



Voices

Use these flashcards to help memorize information. Look at the large card and try to recall what is on the other side. Then click the card to flip it. If you knew the answer, click the green Know box. Otherwise, click the red Don't know box.

When you've placed seven or more cards in the Don't know box, click "retry" to try those cards again.

If you've accidentally put the card in the wrong box, just click on the card to take it out of the box.

You can also use your keyboard to move the cards as follows:

If you are logged in to your account, this website will remember which cards you know and don't know so that they are in the same box the next time you log in.

When you need a break, try one of the other activities listed below the flashcards like Matching, Snowman, or Hungry Bug. Although it may feel like you're playing a game, your brain is still making more connections with the information to help you out.

To see how well you know the information, try the Quiz or Test activity.

Pass complete!
"Know" box contains:
Time elapsed:
Retries:
restart all cards