Information Assurance Key Terms 3&4 (Starred Only)

Front 1

*Accountability

Back 1

It is the mechanism that enables the internal control function

Front 2

*Asset Identification

Back 2

It is the classification and identification of each item placed under the information assurance scheme

Front 3

**Asset Valuation

Back 3

The value placed on an information item by the organization

Front 4

*****Availability

Back 4

It is the quality that ensures that the information is provided to the authorized users when it is required

Front 5

*****Baseline

Back 5

It is the aggregate set of secured assets

Front 6

**Breached

Back 6

It is the violation of personnel policies

Front 7

*****Confidentiality

Back 7

Organization’s need to restrict access to information or data

Front 8

**Containment

Back 8

It focuses on keeping sensitive data within assured system

Front 9

**Control Set

Back 9

It is the security infrastructure of the organization

Front 10

***Controls

Back 10

They are security measures for access to data

Front 11

**Detection

Back 11

It seeks to find and help people react to an assured system penetration

Front 12

**Deterrence

Back 12

It describes those policies, procedures, and actions that are designed to discourage penetration of an assured system

Front 13

*Disciplined

Back 13

Baseline must be updated in disciplined fashion to secure information

Front 14

*Feasibility

Back 14

It is the likelihood that a task or purpose can be accomplished

Front 15

*Incident Handling

Back 15

It is an exceptional process that is invoked only when the organization encounters a problem within its information assurance function that it has not seen before

Front 16

*Information Assurance Perimeter

Back 16

It is the outer boundary of the space to be secured

Front 17

*****Integrity

Back 17

It is the quality of authenticity, accuracy, and completeness of data

Front 18

**Metrics

Back 18

Measure for assessing information assurance performance

Front 19

*Monitoring

Back 19

It is enforcement of accountability measure

Front 20

**Policy

Back 20

Documented organizational processes

Front 21

**Prevention

Back 21

Methods used to stop security breaches before they happen

Front 22

*Process Entropy

Back 22

It is the natural tendency for any organized system to degrade over time due to the changing conditions

Front 23

*Process

Back 23

They are steps to carry out a policy

Front 24

**Recovery

Back 24

It details the actions necessary to restore a system’s processing capability and data files after a failure or penetration

Front 25

***Risk Analysis

Back 25

It is a process to determine risk estimation

Front 26

*Security Infrastructure

Back 26

It is a combined set of policies, roles and responsibilities and accountabilities for a given organization

Front 27

*Stakeholder

Back 27

They are the users or creators of information

Front 28

***Threat

Back 28

It is capable of exploiting known weakness in an organization

Front 29

****Vulnerabilities

Back 29

Perceived weaknesses in an organization that can be exploited

Front 30

****Authentication

Back 30

It is the security service that establishes the validity of a transmission, message, or originator

Front 31

****Authorization

Back 31

When access is given to acquire specific items of information

Front 32

*****Availability

Back 32

t provides authorized users with timely, reliable access to data and information services

Front 33

*****Confidentiality

Back 33

It ensures that information is not disclosed to unauthorized persons, processes, or devices

Front 34

*Consequence

Back 34

It is the cost to the organization for the inability to perform a specific function

Front 35

*Information Assurance Infrastructure

Back 35

It determines how an organization establishes a concrete and sustainable assurance process through a framework of specially designed procedures

Front 36

*Infrastructure

Back 36

The information assurance framework is referred to as infrastructure

Front 37

*Information Assurance Manual

Back 37

It documents an organization’s policies, procedures, and work practices

Front 38

****Integrity

Back 38

Specific protection against unauthorized modification or destruction of data in its transmission, storage, and processing

Front 39

*Management Controls

Back 39

They are behavioral controls that regulate access to protected information through procedures

Front 40

***Non-Repudiation of Origin

Back 40

It provides the data center with proof of delivery and it ensures the sender’s identity to the recipient

Front 41

*Operational Controls

Back 41

They are the day-to-day procedures that protect the operation from a wide variety of physical and environmental threats

Front 42

*Technical Controls

Back 42

They are authorization controls and make up the automated access control system