2.1.E.2Risk avoidance stops the activity that is generating the risk. If the activity is a critical part of an organization’s mission or purpose, then avoidance is not possible.Learning objective: Identify strategies for managing risk.
5.1.C.1Data security risks can involve a compromise of confidentiality when unauthorized persons can access sensitive data, integrity when data can be manipulated or altered from its intended state, and availability when data can be…Learning objective: Assess and document risks from application and data vulnerabilities.
AP Networking alignment
4.5.A.1Unauthorized access, data exposure, or disruption of services can result from accidental or intentional misuse of systems by users. These impacts may occur when individuals access resources beyond their role, mishandle data,…Learning objective: Identify the impacts of common threats and vulnerabilities in a managed network.
4.5.B.2Security policies and procedures help reduce user-related vulnerabilities by defining acceptable behaviors and standardizing how systems and data are used. These controls can reduce misconfiguration, mishandling, or improper…Learning objective: Determine appropriate security controls to limit the impacts of common threats and vulnerabilities in a managed network.
4.6.B.4Applying and documenting software updates and patches reduces the risk of failure and reduces recovery time if an outage occurs.Learning objective: Identify ways to improve the reliability and availability of networked systems.