Question 1. What Is C.i.a?
The C.I.A. triangle was the standard based on confidentiality, integrity, and availability. The C.I.A. triangle has expanded into a list of critical characteristics of information.
Question 2. Write A Note On The History Of Information Security ?
Computer security began immediately after the first mainframes were developed Groups developing code-breaking computations during World War II created the first modern computers Physical controls were needed to limit access to authorized personnel to sensitive military locations Only rudimentary controls were available to defend against physical theft, espionage, and sabotage.
Question 3. What Is Rand Report R-609?
Information Security began with Rand Corporation Report R-609, The Rand Report was the first widely recognized published document to identify the role of management and policy issues in computer security.
Question 4. What Is The Scope Of Computer Security?
The scope of computer security grew from physical security to include:
- Safety of the data Limiting unauthorized access to that data
- Involvement of personnel from multiple levels of the organization.
Question 5. Define Physical Security ?
Physical Security – to protect physical items, objects or areas of organization from unauthorized access and misuse.
Question 6. Define Personal Security ?
Personal Security involves protection of individuals or group of individuals who are authorized to access the organization and its operations.
Question 7. Define Operations Security ?
Operations security focuses on the protection of the details of particular operations or series of activities.
Question 8. Define Communications Security ?
Communications security – encompasses the protection of organization’s communications media, technology and content.
Question 9. Define Network Security ?
Network security – is the protection of networking components,connections,and contents.
Question 10. Define Information Security ?
Information security – is the protection of information and its critical elements, including the systems and hardware that use, store, and transmit the information.
Question 11. What Are The Critical Characteristics Of Information?
Question 12. What Is Nstissc Security Model?
This refers to “The National Security Telecommunications and Information Systems Security Committee” document. This document presents a comprehensive model for information security. The model consists of three dimensions.
Question 13. What Are The Components Of An Information System?
An Information System (IS) is much more than computer hardware; it is the entire set of software, hardware, data, people, and procedures necessary to use information as a resource in the organization.
Question 14. What Is Meant By Balancing Security And Access?
- Balancing Security and Access
- It is impossible to obtain perfect security – it is not an absolute; it is a process
- Security should be considered a balance between protection and availability
- To achieve balance, the level of security must allow reasonable acces, yet protect against threats.
Question 15. What Are The Approaches Used For Implementing Information Security?
- Bottom Up Approach
- Top-down Approach.
Question 16. What Is Sdlc?
- The Systems Development Life Cycle
- Information security must be managed in a manner similar to any other major system implemented in the organization
- Using a methodology
- ensures a rigorous process
- avoids missing steps.
Question 17. Explain Different Phases Of Sdlc ?
Investigation, Analysis, Logical Design, Physical Design, Implementation,Maintenance and Change.
Question 18. What Is Security Sdlc?
- Security Systems Development Life Cycle
- The same phases used in the traditional SDLC adapted to support the specialized implementation of a security project
- Basic process is identification of threats and controls to counter them
- The SecSDLC is a coherent program rather than a series of random, seemingly unconnected actions.
Question 19. How Information Security Is Viewed As A Social Science?
Social science examines the behavior