In access control, we use the terms subjects and objects. Knowing the difference and what both can do is important for the exam. Subject – (Active) Most often users, but can also be programs – Subjects manipulate object. Object – (Passive) Any passive data (both physical paper and data) –
Qualitative vs. Quantitative Risk Analysis. For any Risk analysis we need to identify our assets. What are we protecting? Qualitative Risk Analysis – How likely is it to happen and how bad is it if it happens? This is vague, guessing, a feeling and relatively quick to do. Most often
7 Cybersecurity Questions Every Leader Should Ask Theresa Payton, former CIO for the White House and current CEO of Fortalice Solutions, a cybersecurity and intelligence consulting firm, identifies the seven cybersecurity questions every business leader should ask. Source: www.forbes.com/sites/kimberlywhitler/2017/09/16/7-cybersecurity-questions-every-leader-should-ask/
Equifax Inc. (NYSE: EFX) announced on 9/7 a cybersecurity incident potentially impacting 143 million U.S. residents. The attackers exploited a website application vulnerability and gained access to certain files. Based on Equifax’s investigation, the attackers had access from mid-May through the end July 2017. The criminals