Reviewer

Focuses on protecting digital information

Application of technologies, processes, and controls

Sensitive and private information is only accessible to authorized individuals.

Maintaining the accuracy and reliability of data.

Information and systems are accessible and operational when needed.

Encompasses a wide range of practices.

Fundamental processes to control access to systems and data.

Assigning appropriate access rights to authorized users.

Converting information into unreadable formats that an only decrypted by authorized parties.

Barriers between trusted internal networks and untrusted external networks.

Identifying weaknesses in systems and networks through assessments.

Educating users about security best practices

Developing plans to respond

Subject to specific security regulations and standards

Securing data stored in and accessed through cloud services

With the proliferation of mobile devices

Types if malicious software(viruses, worms, ransomware) and their impact.

Deceive individuals and gain unauthorized access.

Fraudulent attempts to obtain sensitive information

Sensitive information is exposed due to security vulnerabilities.

Risks posed by individuals

Creating and managing robust passwords

Protecting data by converting it into a code

Keeping software to sensitive information

Limiting access to sensitive information

Educating employees about security risks

Developing a plan to address security