CybersecurityLesson 1 of 3 in the course Security management

Information Security: Risk, Controls, and Organizational Practice

5 flashcards · 5 quiz questions · 5 match pairs · 4 fill-in sentences · English

Save course
Lesson progress
0 / 5

Your progress is kept in this browser only.Sign up to save it

Summary

Information security protects information from unauthorized access, misuse, damage, or loss. This lesson introduces the discipline, its core goals, its development, and the standards that help organizations apply security consistently.

Information security, often shortened to infosec, is the practice of protecting information by mitigating information risks. It covers information in any form: electronic records, paper documents, physical objects, and intangible knowledge. Protection includes preventing or reducing the likelihood of unauthorized access, disclosure, modification, destruction, disruption, or other inappropriate use. It also includes reducing the harm when an incident occurs.

All flashcards

What is information security?
The practice of protecting information in any form by mitigating risks of unauthorized access, misuse, disclosure, disruption, alteration, or loss.
What does confidentiality mean?
Information is not made available or disclosed to unauthorized individuals, entities, or processes.
What does integrity mean in information security?
Information remains accurate and complete and is not changed without authorization or detection.
What does availability mean?
Authorized users can access information and systems when they need them.
What is the purpose of an information security standard?
A standard supplies shared guidance, requirements, or criteria that help organizations establish consistent security practices and evaluate protections.

Quiz questions

  1. Which term describes a weakness that a threat could exploit?Answer: Vulnerability.
  2. An organization buys insurance to shift some financial consequences of a security risk to another party. Which risk response is this?Answer: Risk transfer.
  3. What is the central idea of defense in depth?Answer: Use overlapping safeguards so protection can continue if one safeguard fails.
  4. Which statement distinguishes business continuity management from a disaster recovery plan?Answer: Business continuity addresses critical work across the organization; disaster recovery focuses on restoring operations after a disaster.
  5. What does due diligence mean in information security?Answer: Ongoing activities that ensure protection mechanisms remain maintained and operational.

Based on the Wikipedia article Information security, licensed CC BY-SA 4.0. Adapted into a summary, flashcards and quizzes.

More in Cybersecurity

All Cybersecurity lessons
CybersecurityAccess Control: Policies, Models, Physical Systems, and Threats5 flashcards · 5 quiz questions · 4 gamesPlay free →CybersecurityAES: Structure, Round Operations, Security, and Validation5 flashcards · 5 quiz questions · 4 gamesPlay free →CybersecurityDenial-of-Service Attacks: Techniques, Defenses, and Context5 flashcards · 5 quiz questions · 4 gamesPlay free →CybersecurityCryptographic Hashes: Properties, Constructions, and Security Uses5 flashcards · 5 quiz questions · 4 gamesPlay free →CybersecurityThreat Modeling: Methods, Tools, and Applications5 flashcards · 5 quiz questions · 4 gamesPlay free →CybersecurityRole-Based Access Control: Core Rules, Extensions, and Trade-offs5 flashcards · 5 quiz questions · 4 gamesPlay free →