CISSP-ISSMP: Information Systems Security Management Professional

A Request for Information (RFI) supports preliminary market research by asking vendors for details about unfamiliar products or services, including demonstrations and samples. It is not a request for binding bids, quotes, or formal solution proposals.

Integrity protects information from improper or unauthorized modification, including changes attempted by unauthorized entities and unauthorized changes attempted by otherwise authorized personnel or processes. It also requires information to remain accurate, complete, and consistent with related records and the real-world state it represents. Attribution of an individual’s actions is an accountability function rather than an integrity property. NIST defines integrity as guarding against improper information modification or destruction.

Digest-style encrypted authentication prevents usernames and passwords from being sent across the network in plaintext, and it is suited to Internet-facing access. SSL protects the remaining HTTP communication in transit. Basic authentication alone sends credentials in an unencrypted, Base64-encoded form, while EAP is an access-authentication framework rather than the appropriate web-server authentication method. Microsoft’s IIS documentation states that Digest authentication protects credentials and that SSL should be used to secure the communication body.

Configuration management maintains the consistency of a system or product’s performance, functional attributes, physical attributes, requirements, design, and operational information throughout its life.