elaborate on the following The following strategies will be used to develop information systems in the future: Continuous threat and system behaviour monitoring Formal methodologies for vulnerability detection Use of testbeds to assess risks in fielded systems Access rights and privileges management Standards for certification and accreditation

elaborate on the following The following strategies will be used to develop information systems in the future: Continuous threat and system behaviour monitoring Formal methodologies for vulnerability detection Use of testbeds to assess risks in fielded systems Access rights and privileges management Standards for certification and accreditation

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter11: Security Maintenance

Section: Chapter Questions

Problem 2DQ

See similar textbooks

Similar questions

Software Assurance Maturity Model (SAMM) is an open framework to help organizations formulate and implement security policy for an organization. Answer the following questions regarding SAMM: How do organizations generally deploy SAMM Model? Is SAMM a descriptive model or prescriptive model? Write the rationale behind your answer.
A. What conditions must be met to ensure that risk acceptance has been used properly? B. Discuss the concept of an organisation’s competitive advantage against competitors and how it has evolved over the years with the ongoing development of the IT industry. C. Explain why networking components need more examination from an information security perspective than from a systems development perspective. Why must this practice be periodically reviewed? D. With the aid of a diagram, discuss the contingency planning hierarchy. E. What is the DMZ? Discuss whether this is a good name for the function that this type of subnet performs.
We will examine four logical security strategies that empower system security administrators. These measures would provide the administrator with increased system control.
: Being a security analyst, identify different threats on this system using threat modeling process (STRIDE)
research on computer-based risk management. Determine your resources, threats, weaknesses, risks, and mitigation. Include system parts in each category. What significant flaws were discovered? How can risk be diminished? own system security strategy? Will you carry out? If not, why not?
Which of the following is the best description of purpose of risk management? a. To implement measures to reduce risks to an acceptable level. b. To outline the threats to which IT resources are exposed. c. To determine the damage caused by possible security incidents. d. To determine the probability that a certain risk will occur.
A key role of penetration testing as used by IT security professionals is to identify system weaknesses of various kinds. According, pen testing is an important method for protecting organizations from unwanted attacks or intrusions. Why is it important to understand the risks presented by weak physical security? How does defense in depth prevent attacks? What considerations inform decisions regarding which physical controls should be implemented and for what reasons?
Identify the four most significant purchasing and selling system security vulnerabilities. Then, discuss their possible causes and mechanisms.
Q5)System survivability and Service availability are two important factors in security engineering. Discuss the situations where the importance of both plays a vital role.
Examine the benefits and drawbacks of information security division of roles within an organization's information security procedures by using a plausible scenario, and compare and contrast your findings.
Explore the challenges and strategies associated with system security management. How can organizations ensure the security of their systems while still maintaining efficient operations?
Explain with an example why resilience to cyber attacks is a very important characteristic of system dependability.