CISMP

2. A ____ is something that may happen that may cause some unwanted consequences (6)
8. Ensuring that the identity of a subject (14)
9. These are complex software packages that hijack the operating system (8)
10. Users should only be granted the minimum level of ______ to perform the role assigned to them (9)
11. An attack that hasn't been seen yet (7)
13. The over-arching security document
15. One of the CIA components (12)

1. One of the controls (9)
3. A risk mitigation (9)
4. Experience has shown that if ______ ______ is not in place, assurance initiatives will probably fail (6, 7)
5. One of areas in risk management (5)
6. One of the basic ways in which likelihood can be assessed (14)
7. One of the CIA components where information hasn't been amended (9)
12. One of the security documents which is not mandatory(9)
14. An example of malware that cannot spread on their own (7)
16. Formal or informal review of actions, processes, policies and procedures (5)