Please enable JavaScript.

Coggle requires JavaScript to display documents.

CHAPTER 8 : Controls for Information Security - Coggle Diagram

- - - - Assess threats & select risk response
      - Develop and communicate policy
      - Acquire & implement solutions
      - Monitor performance
  - - - P = the time it takes an attacker to break through the various controls that protect the organization’s information assets
      - D = the time it takes for the organization to detect that an attack is in progress
      - R = the time it takes to respond to and stop the attack
- - - - Creation of a “security-aware” culture
      - Training
    - - : User access controls (authentication and authorization)
      - Penetration Testing
      - Change controls and change management
    - - Anti-malware
      - Network access controls (firewalls, intrusion prevention systems, etc.)
      - Device and software hardening (configuration controls)
      - Encryption