Review Questions

Now it's time to check your knowledge. Answer the questions, then check your answers, found in the Solutions section at the end of the book:

1. What is a vulnerability in relation to risk management?
2. What is the purpose of BPA?
3. What is a multiparty risk?
4. What is IP theft?
5. What is the difference between an MOU and an MOA?
6. What is tokenization and why is it stronger than encryption?
7. One of the junior members of the IT team installs more copies of a piece of software than are allowed by the licenses that the company has purchased. What have they just carried out?
8. What is the purpose of an ISA?
9. How does the shadow IT threat actor operate and what type of attack could benefit from their actions?
10. What is an inherent risk?
11. What are the four stages of the information life cycle?
12. Why would you use STIX\TAXII?
13. What is the benefit of introducing a separation of duties in the finance department?
14. What is the...