Chapter 10 – Governance, Risk, and Compliance

1. A vulnerability is a weakness that an attacker could exploit.
2. A BPA is used by companies in a joint venture, and it lays out each party's contribution, their rights and responsibilities, how decisions are made, and who makes them.
3. A multi-party risk is where someone wins a contract and sub-contracts to a third party who could sabotage your systems.
4. This occurs when your intellectual property has been stolen, for example, trade secrets, copyright, and patents.
5. A memorandum of understanding is a formal agreement between two parties, but it is not legally binding, whereas a memorandum of agreement is similar, but is legally binding.
6. Tokenization is the process by which data is replaced by a stateless token and the actual data is held in a vault by a payment provider. Because data is held in a remote location, it is stronger than encryption for which keys are held locally.
7. They have carried out a software...