Cipt - Body Of Knowledge Study Guide Graded A+

Online Threats: Phishing {Ans: A fake email is disguised to look like it is from a legitimate organization or person to lure an unsuspecting consumer to click on a link embedded in the email.}Online Threats: Pharming {Ans: Redirects a valid Internet request to a malicious site by modifying a Hosts file or corrupting the Domain Name System server.}Automated Data Retrieval {Ans: Prevents users from accessing data without proper authentication.}Encryption: Common Regulations {Ans: 1) Basel III: Mandatory encryption for financial reporting data and other related sensitive information at rest and in transit. 2) HIPAA: Suggests encryption for health data. 3) PCI DSS: Requires encryption for cardholder data 4) Financial Instruments and Exchange Law of Japan: Requires encryption for sensitive financial data.}Outline of a Privacy Notice {Ans: Information Lifecycle + Common Privacy Principles, Marketing Contact, Use of Cookies, Resolving Privacy Issues, Release Date of Privacy Notice, Changes to Privacy Notice}Encryption: Field vs Record {Ans: Field: Ability to only encrypt sensitive fields within a record while leaving non-sensitive fields unencrypted. Record: Encrypts one records at a time within the entire data set. (Ex: a row in a table)}