Match each item with a statement below.
-Investigation and assessment of the impact that various attacks can have on the organization.
A)managerial guidance SysSP document
B)security training
C)incident response
D)business continuity plan
E)information security policy
F)de jure
G)de facto
H)security blueprint
I)business impact analysis

Question

Quizplus · Accepted Answer

Business impact analysis involves investigation and assessment of the impact that various attacks can have on the organization.

Answer: C 
 Incident response involves responding to and managing the aftermath of a security incident.

Answer: D 
 A business continuity plan outlines how an organization will continue to operate in the event of a disruption or disaster.

Answer: E 
 An information security policy is a document that outlines an organization's policies and procedures for protecting its information assets.

Answer: A 
 A managerial guidance SysSP document provides guidance to managers on how to implement and maintain information security in an organization.

Answer: H 
 A security blueprint is a comprehensive plan that outlines an organization's security infrastructure and operations.

Answer: F 
 De jure refers to something that is legally recognized, while de facto refers to something that is true in practice, even if it is not legally recognized. These terms are not directly related to information security.

Answer: G 
 De jure refers to something that is legally recognized, while de facto refers to something that is true in practice, even if it is not legally recognized. These terms are not directly related to information security.

Answer: B 
 Security training involves educating employees on how to identify and respond to security threats and vulnerabilities.

Match Each Item with a Statement Below