Term
|
Definition
|
|
Term
|
Definition
|
|
Term
|
Definition
| Accuracy of corp. records, tax reporting, Sarbanes Oxley (SOX) Act compliance |
|
|
Term
| Governance Requirements (5) |
|
Definition
Strategic Alignment of Info Security w/business strategy
Risk mgt
resource mgt
perf measurement
value delivery |
|
|
Term
|
Definition
Understand business
Budget
Develop
Train
Ensure compliance
Promote awareness
Inform
Measure
Assist
Report |
|
|
Term
| Organizational Security Model |
|
Definition
| Depends on governance structure, security goals, regulatory environment, & risk level. |
|
|
Term
|
Definition
| exposing EEs to different job areas (creates highly qualified staff, exposes improper staff activity security violations, reducing risk of individual criminal acts) |
|
|
Term
|
Definition
| individual unable to complete all phases on process (less likely for computer crimes to occur) |
|
|
Term
| Mandatory Vacation Security Application |
|
Definition
| Force EE to take vacation to investigate EE activities |
|
|
Term
| Job Position Security Application |
|
Definition
Determine N2K for job function
Document into Sensitivity Profile
Administrators assign authorization permissions to indviduals based on Sensitivity Profile. |
|
|
