CHAPTER SUMMARY
You learned in this chapter how you can use data classification to identify critical data and protect it. The chapter reviewed military and business classification schemes and examined how these schemes apply to data handling policies. It examined the need to have policies govern data at rest and in transit. The chapter also discussed how data classification helps reduce business risks.
The chapter included discussion of risk management. It discussed how the risk control and self-assessment process (RCSA) can be leveraged to help gain support from executive management. The chapter also explored the differences between quality assurance and quality control. Also, you read in this chapter about how to use QA and QC techniques to measure the effectiveness of risk management policies.
KEY CONCEPTS AND TERMS
CHAPTER 11 ASSESSMENT
- Which of the following is not a common need for most organizations to classify data?
- Protect information
- Retain information
- Sell information
- Recover information
- Authorization is the process used to prove the identity of the person accessing systems, applications, and data.
- True
- False
- You need to retain data for what major reasons?
- Legal obligation
- Needs of the business
- Recovery
- A and B
- A, B, and C
- What qualities should the data owner possess?
- Is in a senior position within the business
- Understands the data operations of the business
- Understands the importance and value of the information to the business
- Understands the ramifications of inaccurate data or unauthorized access
- All of the above
- In all businesses, you will always have data that needs to be protected.
- True
- False
- Risk exposure is best-guess professional judgment using a qualitative technique.
- True
- False
- The lowest federal government data classification rating for classified material is ________.
- Federal agencies can customize their own data classification scheme.
- True
- False
- What is a process to understand business leaders’ perspective of risk called?
- QA
- QC
- RCSA
- D. RA
- Quality assurance is typically a detective control.
- True
- False
- Generally, having 5 to 10 data classifications works best to cover all the possible data needs of an organization.
- True
- False
- Risk exposure can be expressed in the following manner: ________ = ________ × ________.
- Data in transit is what type of data?
- Data backup tapes being moved to a recovery facility
- Data on your USB drive
- Data traversing a network
- Data being stored for later transmission
- Encryption protects data at rest from all types of breaches.
- True
- False