Free ISC2 ISSMP Exam Dumps

A Single Loss Expectancy (SLE) is the value in dollar ($) that is assigned to a single event. The SLE can be calculated by the following formula.

SLE = Asset Value ($) X Exposure Factor (EF)

The Exposure Factor (EF) represents the % of assets loss caused by a threat. The EF is required to calculate the Single Loss Expectancy (SLE).

The Annualized Loss Expectancy (ALE) can be calculated by multiplying the Single Loss Expectancy (SLE) with the Annualized Rate of Occurrence (ARO).

Annualized Loss Expectancy (ALE) = Single Loss Expectancy (SLE) X Annualized Rate of Occurrence (ARO)

Annualized Rate of Occurrence (ARO) is a number that represents the estimated frequency in which a threat is expected to occur. It is calculated based upon the probability of the event occurring and the number of employees that could make that event occur.

The various SSE-CMM levels are described in the table below.

LEVEL DESCRIPTION

LEVEL 1 It focuses on whether an organization or project performs a process that incorporates the BPs. A statement characterizing this level would be, 'You have to do it before you can manage it.'

LEVEL 2 It focuses on project-level definition, planning, and performance issues. A statement characterizing this level would be, 'Understand what's happening on the project before defining organization-wide processes.' LEVEL 3It focuses on disciplined tailoring from defined processes at the organization level. A statement characterizing this level would be, 'Use the best of what you've learned from your projects to create organization-wide processes.'

LEVEL 4It focuses on measurements being tied to the business goals of the organization. Although it is essential to begin collecting and using basic project measures early, measurement and use of data are not expected organization-wide until the higher levels have been achieved. Statements characterizing this level would be, 'You can't measure it until you know what 'it' is,' and 'Managing with measurement is meaningful only when you're measuring the right things.'

LEVEL 5It gains leverage from all the management practice improvements seen in the earlier levels, then emphasizes the cultural shifts that will sustain the gains made. A statement characterizing this level would be, 'A culture of continuous improvement requires a foundation of sound management practice, defined processes, and measurable goals.'

Patch management broadens itself to the actual implementation of the code changes and monitors the function of the code to identify any unforeseen circumstances that did not emerge during the testing phase.

1.Gathering the needed assessment materials.

2.Performing the vulnerability assessment.

3.Analyzing the information compiled.

4.Documenting the results and presenting recommendations.

A policy statement is a well-written policy. It is an important and fundamental element of a good security practice. Policies are the foremost and uppermost level of documentation, from which the lower-level elements of standards, procedures, and guidelines flow. The policy statement hierarchy from top to bottom is as follows:

1.Senior Management Statement of policy

2.General Organizational Policies

3.Functional Policies

4.Mandatory Standards

5.Recommended Guidelines

6.Detailed Procedures

The response management plans are shown in the table below:

PLANSPURPOSE Business continuity planIt provides measures for sustaining essential business operations while recovering from a significant disruption.

Business recovery planIt provides measures for recovering business operations immediately following a disaster. Continuity of operation It provides measures and capabilities to maintain organizational essential, strategic functions at an alternate site planfor upto 30 days.

Contingency planIt provides measures and capabilities for recovering a major application or general support system. Crisis communication plan It provides measures for disseminating status report to personnel and the public. Disaster recovery planIt provides detailed measures to facilitate recovery of capabilities at an alternate site.

The various categories of evidences required in forensics can be divided into a number of categories, depending on its reliability, quality, and completeness. These categories are as follows:

Best evidence: It is the original or primary evidence rather than a copy or duplicate of the evidence.

Secondary evidence: It is a copy of the evidence or an oral description of its contents. It is not as reliable as the best evidence.Direct evidence: It proves or disproves a specific act through oral testimony based on information gathered through the witness's five senses.

Conclusive evidence: It is incontrovertible evidence, which overrides all other evidence.

Opinions: The following are the two types of opinions:

1. Expert: It offers an opinion based on personal expertise and facts.

2. Non expert: It can testify only to facts.Circumstantial evidence:It is the inference of information from other, intermediate, relevant facts.

Hearsay evidence: This evidence is commonly not admissible in court. It is a third-party evidence. Computer-generated records and other business records fall under the category of hearsay evidence because these records cannot be proven accurate and reliable.