Coordination in threes refers to what three aspects of information security?
~ Informal
~ Formal
~ Technical
When an organization implements controls to limit access to buildings, rooms, or computer systems, these are referred to as __________ controls.
Technical
The organizational hierarchy can be considered a part of __________ controls.
Formal
Training and an employee awareness program could be considered a part of what type of control?
Informal
The first step in developing good management practices and reducing the risk of a security breach is by adopting some __________ standards.
Baseline
Most breaches of information system security occur shortly __________ the terminated employee leaves the organization.
Before
Formal controls should address not only the hiring procedures but also the structures of __________ during employment.
Responsibility
Training and awareness programs are extremely important in developing a __________ core of members of the organization.
Trusted
Coordination in threes still applies, but a further layer of __________ is added when organizations establish relationships with each other.
Complexity
A firewall is an example of a(n) __________ control.
Technical
Name two other security requirements that have become important, especially in a networked environment.
Authentication and non-repudiation
Privacy of data is ensured by what requirement?
Confidentiality
The Trusted Computer System Evaluation Criteria (TCSEC) was originally developed by _______________.
The US Department of Defense
Access controls could be either _________ or __________.
No read up or no write down
The philosophy of need-to-know is based on efforts to classify information and maintain strict segregation of people, and was developed by the military as a means of restricting ___________ access to data.
Enemy
The field of ___________