The Principles of Information Security Quiz

Shared Responsibility in Information Security

• The three communities of interest (senior management, IT staff, and end-users) share responsibility for maintaining a successful information security program by understanding their roles and collaborating to ensure the security of an organization's information assets.

Purpose of an Information Security Program

• The primary purpose of an information security program is to protect an organization's information assets from unauthorized access, use, disclosure, modification, or destruction.

Threats to Information Security

• Common threats to information security include:
  • Human threats (e.g., unauthorized access, malware, phishing)
  • Natural threats (e.g., natural disasters, power failures)
  • Environmental threats (e.g., physical damage, theft)
  • Technological threats (e.g., hacking, viruses)

Social Engineering Attacks

• Common attacks associated with social engineering include:
  • Phishing (fraudulent emails, texts, or messages)
  • Pretexting (fraudulent phone calls or in-person interactions)
  • Baiting (leaving malware-infected devices or storage media)
  • Quid pro quo (trading a service or benefit for access)

Copyrighted Material Usage

• An acceptable use of copyrighted material is through fair use, which permits limited use of copyrighted material for purposes such as:
  • Criticism
  • Commentary
  • News reporting
  • Teaching
  • Scholarship
  • Research