XI. Say in one word (see the words below)

1. saying, showing, proving what somebody or something is

2. receiving something by one’s own efforts or for money

3. event, happening which attracts general attention

4. something unfortunate and undesirable that happens without a cause that can be seen at once

5. seen clearly with the eyes or mind, especially seen with an effort

6. number of repetitions in a given time

7. reduce, make less serious, dangerous or harmful

8. undertaking by a company or the state to provide safeguard against loss, sickness or death in return for regular payments

9. that can or may come into existence or action; indicating possibility

1. accident

2. acquisition

3. discernible

4. frequency

5. identification

6. incident

7. insurance

8. mitigate

9. potential

XII. Give English equivalents

самое уязвимое место, исследовать следующее, управление активами, человеческие ресурсы, экологическая безопасность, управление доступом, приобретение и обслуживание, управление непрерывностью бизнеса, соответствие установленным требованиям, оценка ценности, аппаратные средства и программное обеспечение, оценка угроз, злонамеренные действия, оценка уязвимости, вычисление влияния, обеспечить пропорциональный ответ, без видимой потери производительности, относительная низкая частота возникновения, уменьшить риск, выбрать подходящие меры, купить страховку, ставить под сомнение реальность риска, отрицать существование риска

Keys

Ex. VI

1 – a

2 – k

3 – h

4 – n

5 – b

6 – j

7 – g

8 – q

9 – i

10 – o

11 – d

12 – l

13 – m

14 – f

15 – p

16 – c

17 – e

Ex. X

1 – l

2 – e

3 – d

4 – b

5 – g

6 – a

7 – k

8 – c

9 – f

10 – i

11 – h

12 – j

Ex. XI

1 – e

2 – b

3 – f

4 – a

5 – c

6 – d

7 – h

8 – g

9 – i

Unit 7 – controls

When Management chooses to mitigate a risk, they will do so by implementing one or more of three different types of controls.

Administrative

Administrative controls (also called procedural controls) consist of approved written policies, procedures, standards and guidelines. Administrative controls form the framework for running the business and managing people. They inform people on how the business is to be run and how day to day operations are to be conducted. Laws and regulations created by government bodies are also a type of administrative controls because they inform the business. Some industry sectors have policies, procedures, standards and guidelines that must be followed - the Payment Card Industry (PCI) Data Security Standard required by Visa and Master Card is such an example. Other examples of administrative controls include the corporate security policy, password policy, hiring policies, and disciplinary policies.

Administrative controls form the basis for the selection and implementation of logical and physical controls. Logical and physical controls are manifestations of administrative controls. Administrative controls are of paramount importance.