Difference between revisions of "What the Security Is"

From CNM Wiki
Jump to: navigation, search
(Script)
(Script)
Line 13: Line 13:
 
:The [[CNM Cyber Team]] strives to protect both the systems and data of [[CNM Cyber]]. The ''Team'' distinguishes two branches of the security governance.
 
:The [[CNM Cyber Team]] strives to protect both the systems and data of [[CNM Cyber]]. The ''Team'' distinguishes two branches of the security governance.
  
:The policy branch can be compared with the legislative branch of the government. This branch defines policies such as [[privacy policy]], [[backup and recovery policy]], [[user access policy]], [[informational resource policy]], and [[human resource policy]] that create sets of security governing rules. These rules serve as the law of the ''CNM Cyber'' land.
+
:The policy branch can be compared with the legislative branch of the government. This branch defines policies that serve as the law of the ''CNM Cyber'' land.
 +
 
 +
:For instance, the [[privacy policy]] defines how sensitive [[user data]] can be collected and shared. The [[backup and recovery policy]] defines how the systems and data shall be protected from disaster losses. [[User access policy]] sets up what users can access what resources. [[Informational resource policy]] defines the database management rules. Finally, [[human resource policy]] regulates the clearances and practices towards the personnel that must access the sensitive data.
  
 
:The executive branch executes the policies and, especially, [[cyber-security]], which is protecting computers, data, and networks from potential attacks or unauthorized access.
 
:The executive branch executes the policies and, especially, [[cyber-security]], which is protecting computers, data, and networks from potential attacks or unauthorized access.

Revision as of 21:10, 19 September 2020

What the Security Is (hereinafter, the Lectio) is the lesson part of the Cyber Security Essentials lesson that introduces its participants to CNM Cabin. This lesson belongs to the Introduction to CNM Cyber session of the CNM Cyber Orientation.


Content

The predecessor lectio is What Pipeline Is.

Key terms

Cyber-security. The practice and a set of concepts based on that practice that are designed to protect computers, data, and networks from potential attacks or unauthorized access.

Script

The CNM Cyber Team strives to protect both the systems and data of CNM Cyber. The Team distinguishes two branches of the security governance.
The policy branch can be compared with the legislative branch of the government. This branch defines policies that serve as the law of the CNM Cyber land.
For instance, the privacy policy defines how sensitive user data can be collected and shared. The backup and recovery policy defines how the systems and data shall be protected from disaster losses. User access policy sets up what users can access what resources. Informational resource policy defines the database management rules. Finally, human resource policy regulates the clearances and practices towards the personnel that must access the sensitive data.
The executive branch executes the policies and, especially, cyber-security, which is protecting computers, data, and networks from potential attacks or unauthorized access.
To protect web operations of CNM Cyber, all of its website are secured with SSL certificate. So, when you communicate with the Cyber on the Internet, all of the communications are encrypted and practically impossible to capture.
The CNM Cyber Team is constantly applying new security patches and following security recommendations to protect the software systems from end-user applications and up to computing servers of the Cyber.
The access to the highest risk areas such as administrative projects of CNM Lab is protected by the public key infrastructure (PKI). This technology is the most secure from all that are available on the market.

User Data in Cyber is the successor lectio.

Questions

Lectio quiz

The answer is recorded for the lectio completion purpose:
  • Would you be interested in working on cyber-security of CNM Cyber? --Yes/No/I'm not sure/Let me think/Let's move on

Placement entrance exam