1. List the Seven Domains of a Typical IT infrastructure and their Weakness. a. User Domain- People b. Workstation Domain- Malware and patches not up to date c. LAN Domain- Data in the network d. LAN-to-WAN Domain- Malicious software outside the network e. Remote Access Domain- Infected with virus and not knowing f. WAN Domain- Anything over the internet g. System/ Application Domain- Servers 2. What is Risk Management and list the various risk management techniques.
Risk management is the thought of handling risk. The techniques are avoidance, transfer, mitigate, and accept 3. List examples for the various risk mitigating techniques. h. Alter the physical environment i. Change procedures j. Add fault tolerance k. Modify the technical environment l. Train employees 4. What is a CBA and why would you perform one?
A CBA is a cost benefit analysis and you would perform one to help determine which controls or counter-measures to implement.

5. U.S. Laws Affecting Compliance Law | Security Summary | Affects | Federal Information Security Management Act (FISMA) | Ensure that federal agencies protect their data | Federal Agencies- the government | Health Insurance Portability and Accountability Act (HIPPA) | Ensures that health information data is protected | Anybody with health information | Gramm-Leach-Bliley Act (GLBA) | Ensures that companies protect customers data, | Mainly Banks and Insurance Companies | Sarbanes- Oxley Act (SOX) | To hold executives and board members personally responsible for financial data | Any company that is publicly traded | Family Education Rights and Privacy Act (FERPA) | To Protect the privacy of student records | All schools that receive any funding from the U.S. Department of Education | Children’s Internet Protection Act