What is an Information Security Assurance?
Information security assurance is the management and protection of knowledge, information, and data.Components Information Security Assurance?
The basic components of information security are most often summed up by the so-called CIA triad: confidentiality, integrity, and availability. Confidentiality is perhaps the element of the triad that most immediately comes to mind when you think of information security.Differentiate the certification programs to Common body language?
Certification programs
are designed to give students mastery over a narrow subject area or topic. These programs are offered in many trades, professional fields, and academic areas and are available at both the undergraduate and graduate levels.
Common body language
is the gestures, movements, and mannerisms by which a person or animal communicates with others.
4.Differentiate the Governance and Risk management?
Governance
is concerned with structure and processes for decision making, accountability, control and behavior at the top of an entity.
Risk management
allows organizations to attempt to prepare for the unexpected by minimizing risks and extra costs before they happen.
5.Different between Security Architecture to Design?
Security architecture
is a unified security design that addresses the necessities and potential risks involved in a certain scenario or environment.
Design
is a visual look or a shape given to a certain object, in order to make it more attractive, make it more comfortable or to improve another characteristic.
6.Different between Business Continuity Planning to D-i-s-a-s-t-e-r Recovery Planning?
Business Continuity Planning
is the process involved in creating a system of prevention and recovery from potential threats to a company.
Disaster Recovery Planning
is a formal document created by an organization that contains detailed instructions on how to respond to unplanned incidents.
7.What is Physical Security Control?
Physical security is the protection of personnel, hardware, software, networks and data from physical actions and events that could cause serious loss or damage.
Examples of physical controls are: Closed-circuit surveillance cameras. Motion or thermal alarm systems. Security guards. Picture IDs. Locked and dead-bolted steel doors. Biometrics (includes fingerprint, voice, face, iris, handwriting, and other automated methods used to recognize individuals)
8.What is Operations Security?
Operations security concerns the security of systems and data while being actively used in a production environment.
9.What is Law?
Law is a rule of conduct developed by the government or society over a certain territory. Law follows certain practices and customs in order to deal with crime, business, social relationships, property, finance, etc. The Law is controlled and enforced by the controlling authority.
10.What is Investigation?
The idea of an active effort to find out something. An investigation is a systematic, minute, and thorough attempt to learn the facts about something complex or hidden.
11.What is Ethics?
Ethics is a system of moral principles. Ethics is concerned with what is good for individuals and society and is also described as moral philosophy.
12.What is Information Security?
(Technical controls) use software and data to monitor and control access to information and computing systems. Passwords, network and host-based firewalls, network intrusion detection systems, access control lists, and data encryption are examples of logical controls.
(photos are not mine, and some thoughts and idea shown are base and from google)