<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Papyrus;
panose-1:3 7 5 2 6 5 2 3 2 5;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=blue>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>As stated in my prior email, I took the
statement from the Trancender study guide. Each organization is under a legal
contract with each other. Legal departments are going to work out the details,
to ensure that both or all companies are compliant with regulations. Remember
the exam is high level you need to know the concept of what downstream
liability is.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<p class=MsoNormal><font size=2 color=navy face=Papyrus><span style='font-size:
10.0pt;font-family:Papyrus;color:navy'>Terese </span></font><o:p></o:p></p>
</div>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'> cisspstudy-bounces@cccure.org
[mailto:cisspstudy-bounces@cccure.org] <b><span style='font-weight:bold'>On
Behalf Of </span></b>Jonus Gerrits<br>
<b><span style='font-weight:bold'>Sent:</span></b> Monday, October 26, 2009
1:59 PM<br>
<b><span style='font-weight:bold'>To:</span></b> The CISSP Study Mailing list<br>
<b><span style='font-weight:bold'>Subject:</span></b> Re: [Cisspstudy]
Downstream liabilities</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Are you sure about the quoted infomation. Who is responsible for
what? <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>Jous<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>On Mon, Oct 26, 2009 at 1:52 PM, Terese Matchim <<a
href="mailto:TMatchim@calstrs.com">TMatchim@calstrs.com</a>> wrote:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>This is a definition by Trancender study guide:<br>
<br>
<br>
"Downstream liabilities ensure that organizations working together
under a contract are responsible for their information security management and
the security controls deployed by each organization"<br>
Terese Matchim<br>
CalSTRS, Information Security<br>
tmatchim@CalSTRS.com<br>
<br>
-----Original Message-----<br>
From: <a href="mailto:cisspstudy-bounces@cccure.org">cisspstudy-bounces@cccure.org</a>
[mailto:<a href="mailto:cisspstudy-bounces@cccure.org">cisspstudy-bounces@cccure.org</a>]
On Behalf Of Terese Matchim<br>
Sent: Monday, October 26, 2009 1:22 PM<br>
To: 'The CISSP Study Mailing list'<br>
Subject: Re: [Cisspstudy] Downstream liabilities<br>
<br>
Yes, this valid question regarding legal liabilities that other companies
should agree to if they represent you or work with you.<br>
<br>
Terese Matchim<br>
CalSTRS, Information Security<br>
tmatchim@CalSTRS.com<br>
-----Original Message-----<br>
From: <a href="mailto:cisspstudy-bounces@cccure.org">cisspstudy-bounces@cccure.org</a>
[mailto:<a href="mailto:cisspstudy-bounces@cccure.org">cisspstudy-bounces@cccure.org</a>]
On Behalf Of Jordan, Lemuel CTR<br>
Sent: Monday, October 26, 2009 12:59 PM<br>
To: The CISSP Study Mailing list<br>
Subject: [Cisspstudy] Downstream liabilites<br>
<br>
Sorry forgot turn of the digital signature again<br>
<br>
Following is question from free practice tests. The reference for the is AIO<br>
2001 page 659. I have the 2008 version and do not find this terminology any<br>
where. I may not have looked hard enough yet. Is this even a valid question?<br>
At least the answers as normal descriptions?<br>
***************<br>
When companies come together to work in an integrated manner such as<br>
extranets, special care must be taken to ensure that each party promises to<br>
provide the necessary level of protection, liability and responsibility.<br>
These aspects should be defined in the contracts that each party signs. What<br>
describes this type of liability?<br>
<br>
Cascade liabilities<br>
>Downstream liabilities<br>
Down-flow liabilities<br>
Down-set liabilities<br>
<br>
>correct answer<br>
<br>
_______________________________________________<br>
cisspstudy mailing list<br>
<a href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a><br>
<a href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org"
target="_blank">http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</a><br>
<br>
_______________________________________________<br>
cisspstudy mailing list<br>
<a href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a><br>
<a href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org"
target="_blank">http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</a><br>
<br>
_______________________________________________<br>
cisspstudy mailing list<br>
<a href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a><br>
<a href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org"
target="_blank">http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</a><o:p></o:p></span></font></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>