Cybersecurity: Module 12

An approach to implementing system change that uses policies, procedures, techniques, and tools to manage and evaluate proposed changes, track changes through completion, and maintain systems inventory and supporting documentation.

A process of designing, implementing, and managing the use of specific measurements to determine the effectiveness of the overall security program.

A term traditionally used to describe any detailed statistical analysis technique on performance, but now commonly synonymous with performance measurement.

Data or the trends in data that may indicate the effectiveness of security countermeasures or technical and managerial controls implemented in the organization.

The component of the maintenance model that focuses on evaluating external threats to the organization’s information assets.

The component of the maintenance model that focuses on identifying, assessing, and managing the configuration and status of information assets in an organization.

A procedure that compares the current state of a network segment against a known previous state of the same network segment (the baseline of systems and services).

The component of the maintenance model that focuses on identifying and planning ongoing information security activities and identifying and managing risks introduced through IT information security projects.

The component of the maintenance model focused on identifying specific, documented vulnerabilities and remediating them in a timely fashion.

The process of identifying and documenting specific and provable flaws in the organization’s information asset environment.

A set of security tests and evaluations that simulate attacks by a hacker or other malicious external source.

An assessment approach designed to find and document vulnerabilities that may be present in the organization’s public-facing networks.

An assessment approach designed to find and document selected vulnerabilities that are present on the organization’s internal networks.

An assessment approach designed to find and document vulnerabilities if misconfigured systems are used within the organization.

An assessment approach designed to find and document vulnerabilities in the organization’s wireless local area networks.

The use of mobile scanning techniques to identify open wireless access points.

The processes of removing or repairing flaws in information assets that cause a vulnerability or reducing or removing the risk associated with the vulnerability.

The aspect of organizational management focused on the development and maintenance of buildings and physical infrastructure.

A physical location with access barriers and controls in place to minimize the risk of attacks from physical threats.

The process of gaining unauthorized entry into a facility by closely following another person through an entrance and using the credentials of the authorized person to bypass a control point.

A small room or enclosure with separate entry and exit points, designed to restrain a person who fails an access authorization attempt.