TSYS|Total System Services Information Security Analyst Interview Questions and Answers

Risk, threat, and vulnerability are three distinct concepts in information security.

• Risk is the potential for loss or damage to an asset or organization due to a threat exploiting a vulnerability.

• Threat is any potential danger to an asset or organization, such as a cyber attack or natural disaster.

• Vulnerability is a weakness or gap in security measures that can be exploited by a threat to cause harm.

• Risk = Threat x Vul...read more

SOC 1 is for financial reporting while SOC 2 is for general use and covers security, availability, processing integrity, confidentiality, and privacy.

• SOC 1 is a report on controls at a service organization that are relevant to user entities' internal control over financial reporting.

• SOC 2 is a report on controls at a service organization that are relevant to security, availability, processing integrity, confidentiality...read more