CISMP-V9 Exam Dumps : BCS Foundation Certificate in Information Security Management Principles V9.0

The method used to target senior individuals in an organization for coercing them into actions like misdirected high-value payments is known as a whaling attack. This type of attack is a more targeted version of phishing, aimed specifically at high-ranking executives or important individuals within an organization. The attackers masquerade as a senior player at the organization and use social engineering techniques to trick the target into performing actions such as transferring money or revealing sensitive information. Whaling attacks are highly personalized and often involve extensive research on the target to make the fraudulent requestsseem legitimate and convincing. The term “whaling” is used because it refers to going after the “big fish” or “whales” of an organization, such as CEOs or CFOs, who have access to significant resources and sensitive information. References: Based on the information provided by Kaspersky’s resource center on whaling attacks1.

Misuse case diagrams are a type of diagram used in application threat modeling that includes malicious users (also known as threat actors) and describes how their potential actions could threaten the system, as well as how the system mitigates those threats. These diagrams are an adaptation of use case diagrams, which are commonly used in software engineering to specify the required usages of a system. Misuse case diagrams, on the other hand, focus on the negative scenarios, illustrating how a system can be used improperly and what measures are in place to prevent or mitigate these actions12.

References: The explanation utilizes the knowledge of misuse case diagrams as a tool in threat modeling to understand and communicate about potential security threats12.

 In the context of business continuity (BC), the individual tasked with documenting all relevant details during a BC exercise or actual plan activation is known as the Scribe. The Scribe’s role is crucial as they ensure that all actions, decisions, and changes are recorded accurately, which is essential for post-incident reviews and audits. This position supports the BC process by providing a clear and chronological account of events, which is vital for assessing the effectiveness of the BC plan and for making improvements.

References: The information aligns with the knowledge domains covered in the BCS Foundation Certificate in Information Security Management Principles, particularly under the domain of Disaster Recovery and Business Continuity Management1.