Cissp-Domain 1-Information Security And Risk Management

Front 1

Framework and policies, concepts, principles, structures, and standards describes what

Back 1

Domain 1, Information Security & Risk Management

Front 2

three categories of internal control standards

Back 2

1. general standards
2. specific standards, and
3. audit resolution standards

Front 3

Ensures that the appropriate policies, procedures, standards, and guidelines are implemented to provide the proper balance of security controls with business
operations

Back 3

Security Management

Front 4

Who ultimately makes the final decision on the level of security expenditures and the risk they are willing to take?

Back 4

Senior Management

Front 5

Core Information Security Principles:

Back 5

Confidentiality, Integrity and Availability

Front 6

principle that only authorized individuals, processes, or systems should have access to information on a need-to-know basis

Back 6

Confidentiality

Front 7

principle that information should be protected from intentional, unauthorized,
or accidental changes

Back 7

Integrity

Front 8

principle that information is accessible by users when needed

Back 8

Availability

Front 9

Ensures that the department can function without the computer system within a defined period using alternate processes

Back 9

Business Continuity Planning

Front 10

Ensures the recovery of the information technology processing capability at a permanent site to an acceptable operational state

Back 10

Disaster Recovery Planning