Good Explanation please.

Question 1:

A.) Give a brief description of the following common security risk which are faced by the IT organisations. 

• Ransomware attack
• Cyberwarfare

B.) Briefly explain the risk tolerance level of an IT organisation.

 

Question 2: Answer the following: 

A.) Briefly explain the following cybersecurity standards: 

• ISO 27001. 
• PCI DSS. 

B.) Briefly explain the following cybersecurity regulations and laws: 

• Gramm Leach Billy Act. 
• Cybercrime act of 2001. 

Question 3: Answer the following: 

A.) Briefly explain the following business processes of the IT organisation: 

• Planning and budgeting
• Approval
• Password policy

 

B.) Why is cybersecurity required in the business processes?  

 

Question 4: Answer the following: 

A.) What is the purpose of having cybersecurity principles in the ICT industry? 

B.) Explain the role of the following categories of cybersecurity principles: 

• Govern
• Protect

 

 

Question 5: Briefly explain the following ways/methods to identify the cybersecurity incidents in the IT organisation: 

• Anomalies in outbound network traffic.
• Unauthorised insiders accessing the server and data. words.
• Configuration changes.

Question 6: Provide detail information about the following cybersecurity incidents/concepts: 

• Cybersecurity vulnerability
• Malware
• Denial of Service
• Phishing

 

 

Question 7: Answer the following: 

A.) What is meant by cybersecurity strategies? 

B.) Give any three cybersecurity strategies which should be implemented in the organisation.  

 

Question 8: What is meant by compliance assessment?

 

Question 9: What are the different methods used to submit the documents to the management? 

 

Question 10: List the responsible person to whom compliance documents and other relevant documents are distributed to ensure that business activities meet the requirements. 

 

Question 11: Answer the following: 

A.) What is meant by evaluation strategy? 

B.) List the steps involved in the development of the evaluation strategy.