All organizations need to put significant effort into Correct Answer: Protecting and preventing cyberattacks from causing harm
or disruption
Security controls are not perfect and cannot completely eliminate all risk
...
All organizations need to put significant effort into Correct Answer: Protecting and preventing cyberattacks from causing harm
or disruption
Security controls are not perfect and cannot completely eliminate all risk Correct Answer: It is important that organizations prepare for, and are capable of detecting and managing, potential cybersecurity problems.
An event Correct Answer: Is any change, error or interruption within an IT infrastructure such as a system crash, a disk error or a user forgetting their password.
The National Institute of Standards and Technology (NIST) defines an event as Correct Answer: Any observable occurrence in a system or network.
NIST defines an incident as Correct Answer: A violation or imminent threat of violation of computer security policies, acceptable use policies, or standard security practices.
An incident is Correct Answer: The attempted or successful unauthorized access, use, disclosure, modification or loss of information or interference with system or network operations.
An incident is Correct Answer: The activity of a human threat agent.
An incident is Correct Answer: Anything disruptive, including a court order for discovery of electronic information or disruption from a natural disaster.
Regardless of the exact definition used by a particular organization Correct Answer: It is important to distinguish between events that are handled in the normal course of business and incidents
A cybersecurity incident Correct Answer: Is an adverse event that negatively impacts the confidentiality, integrity and availability of data.
Cybersecurity incidents Correct Answer: May be unintentional, such as someone forgetting to activate an access list in a router, or intentional, such as a targeted attack by a hacker
Technical incidents include Correct Answer: Viruses, malware, denial-of-service (DoS) and system failure
Physical incidents Correct Answer: May include social engineering and lost or stolen laptops or mobile devices
US-CERT provides t
[Show More]