1. Supporting Activity: Protecting Information

What is the mindset required to properly protect information? What role does reasoned paranoia play in this mindset and how can an individual keep the proper balance between protecting information and enabling business?

2. Supporting Activity: Examples of Information Protection

How can information be an asset in a company? Discuss three different examples of information that should be protected by a company and not exposed. Include several examples of what management could do to protect each example.

3. Supporting Activity: Confidentiality, Integrity, and Availability

How do confidentiality, integrity, and availability all play key roles in protecting information? Explain what each means and describe how each works together to protect information.

4. Supporting Activity: Two Information Trends

What are the five different approaches to risk? What are the pros and cons of each strategy? Support your answer with solid reasoning

5. You're the chief security contact for MTS. One of your primary tasks is to document everything related to security and create a manual that can be used to manage the company in your absence. Which documents should be referenced in your manual as the ones that identify the methods used to accomplish a given task?

6. Measuring and Weighing Risk

Explain which of the following policies should be used when assigning permissions, giving users only the permissions they need to do their work and no more?

7. Measuring and Weighing Risk

Explain which of the following strategies involves understanding something about the enemy and letting them know the harm that can come their way if they cause harm to you?

8. Measuring and Weighing Risk

Explain which of the following policies describes how the employees in an organization use company systems and resources, both software and hardware?