ACROSS DOWN 1 The ability to provide tracking of events. 6 Inner layer of information security. 7 Security actions that ensure only authorized parties can view the information. 8 Web content that can be found and indexed by a search engine 9 U.S. law requiring financial institutions to alert customers of policies related to disclosing customer information. 10 Automated attack package that doesn't require much advanced knowledge. 13 Stealing another's personal information for fraudulent purposes. 18 Security actions that ensure that the information is correct and unaltered. 22 An item of value. 24 An individual who attacks for ideological reasons. 26 Premeditated, politically motivated attack. 27 Middle layer of information security. 28 Steps that ensure that the individual is who he/she claims to be. 29 Security actions that ensure that data is accessible to authorized users. 30 Type of action that has the potential to cause harm. 31 Flaw or weakness that allows an attacker to bypass security protections. 2 Person or element that has the power to carry out a threat 3 Attackers who sell vulnerability knowledge to others. 4 Term describing the three protections found in information security 5 Used by governments to spy on citizens or attack foreign governments. 11 The steps necessary to protect a person or property from harm. 12 Situation that involves exposure to danger 14 Unsophisticated hacker 15 Web content that can only be found through a search dialog box on a site. 16 Any type of criminal activity performed using a computer. 17 Probability of a threat happening. 19 Act of providing permission to technology resources. 20 Web content that is intentionally hidden and cannot be found through a standard web browser. 21 U.S. law guarding protected health information. 23 U.S. law designed to fight corporate corruption. 25 Means by which an attack will occur