Fill in the blank: The ethical principle of _____ involves safeguarding an organization’s human resources records that contain personal details about employees.
- honesty
- privacy protection
- unlimited access
- non-bias
A security professional overhears two employees discussing an exciting new product that has not been announced to the public. The security professional chooses to follow company guidelines with regards to confidentiality and does not share the information about the new product with friends. Which concept does this scenario describe?
A security professional overhears two employees discussing an exciting new product that has not been announced to the public. The security professional chooses to follow company guidelines with regards to confidentiality and does not share the information about the new product with friends. Which concept does this scenario describe?
- Preserving evidence
- Security controls
- Security ethics
- Business email compromise
A security professional is updating software on a coworker’s computer and happens to see a very interesting email about another employee. The security professional chooses to follow company guidelines with regards to privacy protections and does not share the information with coworkers. Which concept does this scenario describe?
A security professional is updating software on a coworker’s computer and happens to see a very interesting email about another employee. The security professional chooses to follow company guidelines with regards to privacy protections and does not share the information with coworkers. Which concept does this scenario describe?
- Preserving evidence
- Security controls
- Security ethics
- Business email compromise
Fill in the blank: As a security professional, you monitor the potential threats associated with _____ because they often have access to sensitive information, know where to find it, and may have malicious intent.
Fill in the blank: As a security professional, you monitor the potential threats associated with _____ because they often have access to sensitive information, know where to find it, and may have malicious intent.
- past vendors
- disgruntled employees
- senior partners
- dissatisfied customers
Fill in the blank: Some of the most dangerous threat actors are _____ because they often know where to find sensitive information, can access it, and may have malicious intent.
Fill in the blank: Some of the most dangerous threat actors are _____ because they often know where to find sensitive information, can access it, and may have malicious intent.
- past vendors
- disgruntled employees
- senior partners
- dissatisfied customers
Which of the following statements accurately describe the NIST CSF? Select all that apply.
Which of the following statements accurately describe the NIST CSF? Select all that apply.
- It is only effective at managing long-term risk.
- Its purpose is to help manage cybersecurity risk.
- It is a voluntary framework.
- It consists of standards, guidelines, and best practices.
or
- It is a voluntary framework.
- Security teams use it as a baseline to manage risk.
- It is only effective at managing short-term risk.
- Its purpose is to help manage cybersecurity risk.