Security Assessment and Risk Analysis — Summer 2024

Why is data integrity crucial in information security?

Explain the concept of information transmission in information security.

Discuss the key principles of access control and their role in preserving information security.

What are the key steps involved in a risk management process?

Explain the role of assessments in identifying and mitigating security vulnerabilities.

Discuss the characteristics and implications of Hostile Intelligence Service (HOIS) threats. What are some countermeasures that can be implemented to mitigate these threats?

Discuss the major categories of threats that organizations may face, including examples of each category. How do these threats pose risks to information systems?

Why is the purpose of security planning important in the context of information security?

Provide an example of a real-life situation where contingency planning and disaster recovery were successfully implemented to mitigate the impact of a disruptive event.

Explore the concept of continuity of operations (COOP). Why is COOP an essential component of disaster recovery planning?

Explain the relationship between security planning and policy mechanisms.

How should an organization determine its backup requirements in the event of a disaster or disruptive event?

Discuss the development of plans for recovery actions after a disruptive event. What are the critical steps in the recovery phase of a contingency plan?

What is the concept of "access authorization/verification" in personnel security?

How is the concept of "position sensitivity" used to determine the appropriate level of access and security measures for employees in an organization?

Describe the role of employee clearances in personnel security. What are the different clearance levels, and how are they determined? OR1

What are the responsibilities and considerations related to security for systems maintenance

What is the purpose of conducting security reviews, and how are they typically carried out?

Provide an example of a situation where an organization's auditing and monitoring procedures led to the detection and prevention of a security breach.

Explain the concept of Operations Security (OPSEC).

Define the term "audit" in the context of computer security and INFOSEC

What are the potential drawbacks or challenges associated with implementing encryption in INFOSEC, and how can these challenges be addressed?

What is the role of computer security in Information Security (INFOSEC)?

Describe the purpose and process of conducting OPSEC surveys

Discuss the concept of link encryption. What role does link encryption play in securing data within a network or between network segments?