CIA Part 3 flashcards
CIA Part 3 · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Break-even point in units
- Fixed costs divided by contribution margin per unit; the sales volume at which total revenue equals total cost and operating income is exactly zero.
- Contribution margin ratio
- Contribution margin divided by sales; the percentage of each sales dollar available to cover fixed costs and then contribute to operating income.
- Sunk cost
- A cost already incurred that no future decision can change; it is excluded from relevant-cost analysis because it does not differ among alternatives.
- Theory X and Theory Y
- McGregor's contrasting assumptions: Theory X holds that workers dislike work and need close control; Theory Y holds that workers seek responsibility and are self-motivated.
- Herzberg's two-factor theory
- Hygiene factors such as pay, policy, and working conditions prevent dissatisfaction but do not motivate; motivators such as achievement, recognition, responsibility, and growth produce satisfaction.
- Business process reengineering
- Fundamental redesign of core business processes to achieve dramatic gains in cost, quality, speed, or service, rather than incremental improvement of existing processes.
- Predetermined overhead rate
- Estimated total manufacturing overhead divided by the estimated total allocation base for the period; used to apply overhead to production as it occurs.
- Value chain
- The sequence of primary and support activities, from inbound logistics through after-sales service, by which an organization creates and delivers value to customers.
- CIA triad
- Confidentiality, integrity, and availability: the three core objectives of information security against which controls, risks, and incidents are evaluated.
- Role-based access control
- Access rights are assigned to roles rather than to individuals, and users obtain permissions by being placed in roles, simplifying administration and supporting least privilege.
- Digital signature
- A hash of a message encrypted with the sender's private key; it provides integrity, sender authentication, and non-repudiation, but it does not provide confidentiality.
- Symmetric encryption
- Uses a single shared secret key for both encryption and decryption; fast and suited to bulk data, but key distribution and key management are difficult.
- Salt
- Random data added to a password before hashing so that identical passwords produce different hashes, defeating precomputed rainbow-table attacks.
- Defense in depth
- Layering multiple independent preventive, detective, and corrective controls so that the failure of any single control does not expose the asset.
- Phishing
- A social-engineering attack using fraudulent email or websites that impersonate a trusted party to trick users into revealing credentials or running malware.
- Recovery time objective
- The maximum acceptable time to restore a business process or system after a disruption; it drives disaster recovery strategy and backup site selection.
- OSI model
- Seven-layer reference model-physical, data link, network, transport, session, presentation, application-describing how data moves between networked systems.
- RAID 5
- Block-level striping with distributed parity across three or more disks; it survives one disk failure and provides usable capacity equal to n minus one disks.
- IaaS
- Cloud model supplying virtualized compute, storage, and networking; the customer manages operating systems, middleware, and applications while the provider manages the underlying infrastructure.
- Incident management (ITIL)
- Restoring normal service operation as quickly as possible after a disruption while minimizing business impact, as distinct from problem management, which identifies root causes.
- ACID properties
- Atomicity, consistency, isolation, and durability: guarantees that a database transaction completes fully or not at all and stays reliable despite failures.
- Incremental backup
- Copies only data changed since the most recent backup of any type; fast to run but slow to restore because the last full plus every increment is needed.
- Primary key
- A column or combination of columns that uniquely identifies each row in a relational table and cannot contain null values.
- Waterfall SDLC
- Sequential development model with distinct phases-requirements, design, build, test, implement, maintain-where each phase is completed before the next one begins.
- Current ratio
- Current assets divided by current liabilities; measures short-term liquidity and the ability to cover obligations falling due within one year.
- DuPont analysis
- Return on equity decomposed into net profit margin times total asset turnover times equity multiplier, showing whether profitability, efficiency, or leverage drives returns.
- Net present value
- Present value of a project's cash inflows minus its initial outlay, discounted at the cost of capital; a positive NPV means the project adds value.
- WACC
- Weighted average cost of capital: after-tax cost of debt and cost of equity weighted by their proportions in the capital structure, used as the discount rate.
- Times interest earned
- Earnings before interest and taxes divided by interest expense; indicates how many times operating earnings cover the entity's interest obligations.
- Quick ratio
- Cash, marketable securities, and receivables divided by current liabilities; a stricter liquidity test that excludes inventory and prepaid expenses.
- Inventory turnover
- Cost of goods sold divided by average inventory; the number of times inventory is sold and replaced during the accounting period.
- Payback period
- Time required for cumulative cash inflows to equal the initial investment; simple and liquidity-focused, but it ignores the time value of money and later cash flows.