1. Risk- is the likelihood that something bad will happen to an asset.
Threat- is any action that could damage an asst
Vulnerability- is a weakness that allows a threat to be realized or to have an effort on an asset. (Know if difference) 2. Gramm-Leach-Bliley Act (GLBA) – a U.S. federal law requiring banking and financial institutions to protect customers’ private data and have proper security controls in place. 3. Data Classification Standard – that defines how to treat data throughout your IT infrastructure. This is the road map for identifying what controls are needed to keep data safe. A definition of different data types. 4. IT Security Policy Framework- a set of rules for security. The framework is hierarchical and includes policies, standards, procedures, and guidelines. 5. Whom are you trying to catch (Black-Hat, White-Hat and Gray-Hat Hacker)- Black hacker a computer attacker who tries to break IT security for the challenge and to prove technical prowess. White hacker an information security or network professional who uses various penetration test tools to uncover or fix vulnerabilities, also called ethical hacker. Gray hacker a computer attacker with average abilities who may one day become a black-hat hacker, gray-hat hackers are also called wannabes. 6. Difference between Threats and Vulnerability – threat any action that could damage an asset. Vulnerability a weakness that allows a threat to be realized or to have an effect on an asset. 7. ? 8. Virtual private networks (VPNs), third-party e-mail redirect (i.e.,RIM/BlackBerry), laptops with VPN software, SSL-VPN tunnels. 9. Information Systems Security- the protection of information systems, application, and data. (Up Grade) 10. Access control- methods used to restrict and allow access to resources. Authentication type-the process of deciding for access to