What is an Information Security Assurance?
Information assurance and security is the management and protection of knowledge, information, and data. Information assurance, which focuses on ensuring the availability, integrity, authentication, confidentiality, and non-repudiation of information and systems.
Examples include security audits, network architecture, compliance audits, database management and the development, implementation and enforcement of organizational information management policies.
Components Information Security Assurance?
Confidentiality – Ensuring that information is accessible only to those authorized to have access.
Integrity – Safeguarding the accuracy and completeness of information and processing methods.
Availability – Ensuring that authorized users have access to information and associated assets when required.
Differentiate the certification programs to Common body language?
• Understand the range of nonverbal behaviors that comprise 'body language'
• Understand the nuances of handshakes and touch
• Understand how your personal style influences your body language
• Match body language to words
• Know how to read facial expressions
• Interpret common gestures
• Interpret eye contact
• Understand power poses
• Know the sign of a fake smile and when someone is lying to you
• Understand the differences in body language across cultures
Differentiate the Governance and Risk management?
Governance - is the overall system of rules, practices, and standards that guide a business. Governance is the strategic task of setting the organization’s goals, direction, limitations and accountability frameworks.
Risk management – is the process of identifying potential hazards to the business and acting to reduce or eliminate their financial impact.
Different between Security Architecture to Design?
Security architecture – is the set of resources and components of a security system that allow it to function.
Security Design – refers to the techniques and methods that position those hardware and software elements to facilitate security. Items like handshaking and authentication can be parts of network security design.
Different between Business Continuity Planning to D-i-s-a-s-t-e-r Recovery Planning?
Business continuity planning involves details about how a company recovers and restores critical business operations and systems after a disaster or extended disruption.
Disaster recovery planning is a detailed process for recovering information or a system in the event of a catastrophic disaster.
What is Physical Security Control?
Physical Security Control – is the implementation of security measures in a defined structure used to deter or prevent unauthorized access to sensitive material.
Example: Closed-circuit surveillance cameras. Motion or thermal alarm systems.
What is Operations Security?
Operations Security – is a risk management process that encourages managers to view operations from the perspective of an adversary in order to protect sensitive information from falling into the wrong hands.
What is Law?
Law is a system of rules that a society or government develops in order to deal with crime, business agreements, and social relationships. You can also use the law to refer to the people who work in this system. Obscene and threatening phone calls are against the law.
What is Investigation?
Investigation is a process of inquiring into or following up research, study, inquiry, especially patient or thorough inquiry or examination. It encompasses law, the sciences, communications, and a host of other things.
What is Ethics?
The word ethics is derived from the Greek word ethos meaning custom character or disposition. In brief ethics are moral principles that can be followed.
What is Information Security?
Information Security is reducing the risk of data breaches and attacks in IT systems. Applying security controls to prevent unauthorized access to sensitive information. Preventing disruption of services. Protecting IT systems and networks from exploitation by outsiders.
