1. Briefly describe five different types of security audits.
2. Summarize five mechanisms for security education, training, and awareness.
3. What is the relationship between the employee life cycle and security management?
4. Why is it a challenge to achieve Separation of Duty if all steps take place on a single computer system?
5. Identify the four types of protection applied to storage systems.
6. Describe methods and techniques used to improve software security.
7. Describe methods and techniques used to improve application security.
8. Describe the role of a Business Impact Analysis in disaster planning.
9. Summarize the five steps in the contingency planning process.
10. What types of information does your organization handle that requires confidentiality? identify types of information that the organization must handle. Explain why the organization must handle the information and why it must be kept confidential. Organizations:
11. Education systems
12. Healthcare systems
13. Financial systems
14. Identify information security risks and threat agents that apply particularly to information systems in: government, healthcare, and financial organizations.
15. Summarize elements of government and military information operations, of intelligence operations, and of operations security.
16. Summarize the major facets of national information security policy.