accurate and timely data

specific and organized data for a purpose

mature and measurable data

can lead to understanding and decrease in uncertainty

An information security policy makes the security plan concrete by providing the necessary details

An information security policy provides insight into threats and the possible consequences

An information security policy provides direction and support to the management regarding information security

An information security policy documents the analysis of risks and the search for countermeasures

True

False

ISO/IEC 27002

Personal data protection act

Computer criminality act

IT Service Management

Say "hi" and offer coffee

Call the receptionist and inform about the visitor

Greet and ask him what is his business

Escort him to his destination

Unauthorised persons viewing sensitive files

Confidential prints being left on the printer

A server shutting down because of overheating

Hackers entering the corporate network

Shoulder Surfing

Mountaineering

Phishing

Spoofing

Undergo background verification

Applicant must complete pre-employment documentation requirements

Must undergo Awareness training on information security.

Must successfully pass Background Investigation

Legal Incidents

Vehicular Incidents

Technical Vulnerabilities

Privacy Incidents

a lightning strike

fire

phishing

thunderstrom

creation, evolution, maintenance, use, disposition

creation, use, disposition, maintenance, evolution

creation, distribution, use, maintenance, disposition

creation, distribution, maintenance, disposition, use

This analysis follows a precise statistical probability calculation in order to calculate exact loss caused by damage.

This analysis is based on scenarios and situations and produces a subjective view of the possible threats.