Pearson · Digital Information Technology · 603/7050/6
BTEC Tech Award Digital Information Technology: Security policy
Effective digital working practices · Pearson BTEC Tech Award Digital Information Technology (603/7050/6), specification point 3.B3. Cards are generated from the exam board's own specification for "Security policy", and every card links back to the page it came from. Specification © Pearson — used with attribution.
12 flashcards · Free to study · No account needed
Sign in and GCSE Zone remembers what you know: cards you have nailed drop out of your study until they are due again.
Study this deck
Preparing your cards…
All questions and answers
Read through the full deck, or practise recalling each answer above.
What is the overall purpose of an organisation's security policy?
Show answer
To minimise potential threats and the impact of security breaches by setting out responsibilities, security parameters and procedures that staff must follow.
What are the three main areas a good security policy should cover?
Show answer
Defining responsibilities, defining security parameters, and a disaster recovery policy.
Give three examples of security parameters defined in a security policy.
Show answer
A password policy, an acceptable software/installation/usage policy, and parameters for device hardening.
Besides who is responsible for what, what should the 'responsibilities' section of a security policy set out?
Show answer
How to report security concerns, and how security matters are reported to staff/employees.
What three things should a disaster recovery policy define about the backup process?
Show answer
What is backed up, the backup schedule, and the media the backups are stored on.
What does 'alternative location provision' in a disaster recovery policy cover?
Show answer
Alternative hardware, software and personnel that can be used if the normal site or systems are unavailable.
What does the 'investigate' stage after a cyber attack establish?
Show answer
The severity and nature of the attack.
Who must be informed during the 'respond' stage after a cyber attack?
Show answer
Stakeholders and the appropriate authorities (kept informed and updated).
What is the main aim of the 'manage' stage after a cyber attack?
Show answer
Containment — following procedures appropriate to the nature and severity of the attack so it does not spread.
What is implemented during the 'recover' stage after a cyber attack?
Show answer
The disaster recovery plan, together with remedial action to restore systems and data.
What happens in the final 'analyse' stage after a cyber attack?
Show answer
The security policy and procedures are reviewed and updated so the same attack cannot succeed again.
The first action an organisation should take after a cyber attack is to ? it.
Show answer
investigate
Want to create your own cards? Create a free account. AI generation uses credits.