VCE Software Development U4O2 Crossword: Threat modelling and evaluating security practices and Copyright, Essential Eight and the ISM (Modules 81–95)
Name:
Date:
Class:
✎
Crossword
Read each clue and write the matching term in the grid. Numbers in brackets show the letters in each word.
1
2
3
4
5
6
7
8
9
10
Across
- 1. An Essential Eight strategy: keep tested, protected copies of data and code, made often, so work can be restored after loss, tampering or ransomware. Word 1 of: _______ backups (7)
- 5. Measurable standards, such as access control, code review, patching and training, used to judge how effective and compliant an organisation's development practices are. Word 1 of: __________ ________ (10)
- 7. Matching each threat to a response chosen by its risk rating: eliminate it, reduce it, transfer it (e.g. insure) or accept it. High risks are treated first. Word 2 of: Risk _________ (9)
- 9. Word 1 of the term in 4 Down: _________ a ____ study (9)
- 10. Word 2 of the term in 5 Across: __________ ________ (8)
Down
- 2. An Essential Eight strategy: give admin accounts only to people who need them, only for tasks that need them, using separate admin accounts and limited production access. Word 1 of: ________ administrative privileges (8)
- 3. Essential Eight controls: application ______ lets only approved software run, and MFA needs extra proof of identity, so both block unauthorised access and malware. Word 2 of: Application _______ and MFA (7)
- 4. Describe how the organisation builds software: who is involved, which environments and tools it uses, and which security controls it has, then spot gaps. Word 3 of: _________ a ____ study (4)
- 6. Comparing a case study's current practices with secure practice to find vulnerabilities, then rating the risk each ______ creates by its likelihood and impact. Word 2 of: ___ ________ (8)
- 8. Word 1 of the term in 6 Down: ___ ________ (3)
Answer Key
VCE Software Development U4O2 · Modules 81–95
1R
E
G
U
L
A
2R
E
S
T
3C
4C
R
O
5E
V
6A
L
U
A
T
I
O
N
N
S
C
T
7T
R
E
A
T
M
E
N
T
R
8G
L
O
9A
N
A
L
Y
S
I
N
G
L
P
S
10C
R
I
T
E
R
I
A
S
Across
1REGULAR — An Essential Eight strategy: keep tested, protected copies of data and code, made often, so work can be restored after loss, tampering or ransomware. Word 1 of: _______ backups
5EVALUATION — Measurable standards, such as access control, code review, patching and training, used to judge how effective and compliant an organisation's development practices are. Word 1 of: __________ ________
7TREATMENT — Matching each threat to a response chosen by its risk rating: eliminate it, reduce it, transfer it (e.g. insure) or accept it. High risks are treated first. Word 2 of: Risk _________
9ANALYSING — Word 1 of the term in 4 Down: _________ a ____ study
10CRITERIA — Word 2 of the term in 5 Across: __________ ________
Down
2RESTRICT — An Essential Eight strategy: give admin accounts only to people who need them, only for tasks that need them, using separate admin accounts and limited production access. Word 1 of: ________ administrative privileges
3CONTROL — Essential Eight controls: application ______ lets only approved software run, and MFA needs extra proof of identity, so both block unauthorised access and malware. Word 2 of: Application _______ and MFA
4CASE — Describe how the organisation builds software: who is involved, which environments and tools it uses, and which security controls it has, then spot gaps. Word 3 of: _________ a ____ study
6ANALYSIS — Comparing a case study's current practices with secure practice to find vulnerabilities, then rating the risk each ______ creates by its likelihood and impact. Word 2 of: ___ ________
8GAP — Word 1 of the term in 6 Down: ___ ________