1.

->

2.

->

3.

-> Compliance Test

Audit undertaken to confirm whether a firm is following the rules and regulations (prescribed by its
internal authority or control system) applicable to an activity or practice.
Substantive test

A procedure used during accounting audits to check for errors in balance sheets and other
financial documentation. A substantive test might involve checking a random sample of
transactions for errors, comparing account balances to find discrepancies, or analysis and review
of procedures used to execute and record transactions.

4.

->Disadvantages of Honeypots

 Narrow Field Of View

 Finger Printing
 Risk
 may be used as a zombie to reach other systems and compromise them

5.

->

 Security Supports the Mission of the Organization

 Security Is an Integral Element of Sound Management.
 Security Should Be Cost-Effective.
 Security Requires Comprehensive and Integrated Approach

6.

->
7.

->Hash functions compress an n (arbitrarily) large number of bits into a small number of bits
(e.g. 512).

Properties

 One way; cannot be reversed

 Output does not reveal information on input
 Hard to find collisions (different messages with same hash)

8.

->

9.

->A digital certificate authenticates the Web credentials of the sender and lets the recipient of an
encrypted message know that the data is from a trusted source (or a sender who claims to be one). A
digital certificate is issued by a certification authority (CA)

10.

1. Defense
2. Transferals
3. Mitigation
4. Acceptance
5. Termination