Bec Su 14 It Security

Front 1

5 focus areas of Control Objectives for Information and Related Technology (COBIT)

Back 1

Strategic alignment
Value delivery
Resource management
Risk management
Performance measurement

Front 2

4 characteristics of CObIT Model

Back 2

Business-focused
Process-oriented
controls-based
Measurement-driven

Front 3

3 principal goals for information security programs

Back 3

data confidentiality
data availability
data integrity

Front 4

Application controls (3 specific tasks)

Back 4

input control
processing control
output controls

Front 5

Provides reasonable assurance that data received for processing have been properly authorized,converted into machine-sensible form and identified

Back 5

Input controls

Front 6

Provides reasonable assurance that processing has been performed as intended for particular application

Back 6

Processing controls

Front 7

Provides assurance that processing result is accurate and that only authorized personnel receive output.

Back 7

Output controls

Front 8

Fully operational processing facility that is immediately available

Back 8

Hot Site

Front 9

Facility with limited hardware such as communications and networking equipment, already installed but lacking necessary servers and client terminals

Back 9

Warm site

Front 10

Shell facility lacking most infrastructure buy readily available for quick installation of hardware and software

Back 10

Cold site

Front 11

prevents entry into a system by unauthorized personnel and prevents access by authorized personnel to data elements that are unnecessary to the performance of their job duties

Back 11

Access control software

Front 12

process of uniquely distinguishing one user from all others

Back 12

Identification

Front 13

process of determining that individuals are who they say they are.

Back 13

Authentication

Front 14

controls programmed into the software that prevent certain types of errors from ever getting into the system

Back 14

Edit routines