ccna certification chart

ccna certification chart. Riskavoidance (Riskavoidance) ------------- This approach eliminates risk altogether by avoiding the occurrence of threats and is largely unworkable in the commercial world, where controlled or manageable risk is profitable.10.1.3.2 Risk managementTake the example of a bank that wishes to offer electronic banking services. Risk management can be illustrated by high-level strategic decisions that describe how to mitigate various risks. It is important to remember that not all mitigation techniques are implemented based on the risk versus overhead formula used in quantitative risk analysis.Internal system compromise (ISC) ---------------- Provide the minimum privileges required for internal users300 Chapter io Managing a secure networkto perform specific tasks and use secure applications to minimize internal access.Stolen customer data (Stolencustomer data) -------------- Keep all customer data on an internal server and transfer data to the outside only when required.Phony transactions if external server is broken into (Phony transactions if external server is broken into) ----------------------------- allows only man-in-the-middle attacks on the external server, designing the external server application so that it does not allow random The external server application is designed so that it is not allowed to initiate transactions on customer accounts at will. Phony transactions using a stolen customer PIN or smart card ------- Do a quick refresh of the revocation list and sign a contract with the user to hold the user accountable for the stolen token card.Insider attack onthe system ------------ Strictly restrict internal access to the application and strictly audit all internal access.