IT Examiner School eBook

CIA Control Table - Integrity Corrective Detective Preventative • Incident Response Plan (IRP)/Procedures • IRP Testing Simulations • Security Review Policy • Security Procedures • Job Rotation

• Duty Segregation • Background Checks and Effective Hiring Practices • Controlled Off-Boarding • Change Management Policy

Administrative

• Control Totals • Checklists • Dual Controls

• Reconciliation • Control Total Verification

• Incident Response Team • Reject Re-Entry

Physical

• Digital Signatures • Patch Management • Anti-Malware Software • Firewalls

• IDS/IPS • Checksums • Hash Comparison

• Platform Restore • Data Integrity Verification and Testing • Operating System Updates

Technical

CIA Control Table - Availability Corrective Detective Preventative • DR Procedures • Emergency Procedures • BC/DR Planning Tests • Continual Monitoring Enabled

• Strategic Planning • Business Continuity (BC)/ Disaster Recovery (DR) Planning • Business Resiliency Planning

• Logging Configuration • Regular Log Reviews

Administrative

• Fire Suppression • Back-Up Media • Uninterruptible Power Supply (UPS) • Generator • Data Vaulting • Failover Configurations • Redundancy Arrays (RAID, Mirroring, Virtual Snapshots, etc.)

• Smoke Detectors • Water Detectors • Video Surveillance • Motion Detectors

• BC Planning Recovery Team • IRP Team • Off-Site Storage/Backups

Physical

• Anti-Malware Software • System Performance Monitoring

• Failover Systems • Load Balancing

Technical