Information Assurance And Security Issues

Smart phones have become a major part of daily life. They allow people all around the world to communicate with each other instantly. Smart phones enable people to access all the information they need in mere seconds using the Internet. Most people go about their days without any worry while using their smart phones. Smart phones have been a tool by the public for many years now, but they have also been used as a tool for something a little more nefarious.

In today’s IT world every organization has a responsibility to protect the information and sensitive data they have. Protecting data is not only responsibility of security and IT staff but every individual is involved in protecting the information. The risks to information security are not digital only, but it involves technology, people and process that an organization may have. These threats may represent the problems that are associated to complex and expensive solution, but doing nothing about these risks is not the solution.

Brick the mobile device when it is lost or stolen; the device will no longer function and it can be temporary or permanently. Back up data in cloud storage so personal data isn’t lost.

Information assurance seeks to secure this information from unauthorized access or use. With our ever advancing technological environment, business are struggling to protect themselves and the information that customers have entrusted to them with occasional mis-steps serving as reminders that one can never be too careful.

Information security is the protection of information against accidental or malicious disclosure, modification or destruction. Information is an important, valuable asset of IDI which must be managed with care. All information has a value to IDI. However, not all of this information has an equal value or requires the same level of protection. Access controls are put in place to protect information by controlling who has the rights to use different information resources and by guarding against unauthorised use. Formal procedures must control how access to information is granted and how such access is changed. This policy also mandates a standard for the creation of strong passwords, their protection and frequency of change.

Technology is all around us. Almost every person in the country owns some form of technology. Whether it’s a television, a computer, a laptop, or a smartphone most Americans own at least one of them. People use their phones for business and personal uses. There is so much information is on your phone. You may think that, that information on your phone is safe, but you are wrong.

Information Security and the breaches are the major concerns for any organization. Maintaining the data safely against the unauthorized access, data loss and modification of data is very important. Because any organization runs on the credibility of the customers.

Other types of risks could be the using of personal device at work. This principle is known as BYOD. BYOD is an IT policy where employees are allowed or encouraged to use their personal mobile device such as phones, tablets, and laptops to access enterprise data and systems. BYOD can expose a company network, and easily attract more attackers. Not only this kind of principle help the company, but it also can cause a serious security breach. Data theft is at high vulnerability when employees are using mobile devices, and particularly their own to share data, access company information, or neglect to change mobile passwords. It is important that a company that allows its employees to use their own devices to list BYOD in their risks list. To

Phones hold critical information such as: addresses, phone numbers, pictures, account information and much more. Mobile phones are considered high risk when it comes to information leakage. According to Forbes , Six of the worlds seven billion people have mobile phones with access to the internet. Cyber attacks can happen at any time and any place, even from the comfort of your own home. Malware, (which is a software that is intended to damage or disable computer systems) is now an easy detection for most computer security

Sub point 1: Mobile devices are small and portable, however they can be easily stolen. Hundreds of thousands of cell phones, laptops and tablets are lost each year. The mobile device in the hands of a stranger provides easy

Since the beginning of the Fall 2016 semester, we have covered a great deal of information in our information assurance class. We defined information security and discussed topics such as why we need security, the legal, ethical, and professional issues involving information security, managing and mitigating risks, how to effectively plan for security, tools such as intrusion detection and prevention systems, cryptography, physical

According to the U.S. Department of Homeland Security in the article Cyber Threats to Mobile Phones, phones are now sharing hardware and software similar to a PC and becoming each time more like a PC. Therefore, the risks of being hacked are increasing, allowing hackers to attack mobile devices the same way as if they were doing it with a regular PC. Personal and professional information are more often stored on mobile devices therefore it is imperative to have our data secure. Security solutions for mobile devices are not as broad or high-tech as those for PCs. The majority of mobile security relies on the proper use and smart choices that the user makes on a daily basis to be protected against cyber attacks. Even the most careful person can be attacked but the possibilities of that happening are less when you are proactive.

Information security professional’s job is to deploy the right safeguards, evaluating risks against critical assets and to mitigate those threats and vulnerabilities. Management can ensure their company’s assets, such as data, remain intact by finding the latest technology and implementing the right policies. Risk management focuses on analyzing risk and mitigating actions to reduce that risk. Successful implementation of security safeguards depends on the knowledge and experience of information security staff. This paper addresses the methods and fundamentals on how to systematically conduct risk assessments on the security risks of information systems.

Safety of information is the most valuable asset in any organization particular those who provide financial service to others. Threats can come from a variety of sources such as human threats, natural disasters and technical threats. By identifying the potential threats to the network, security measure can be taken to combat these threats, eliminate them or reduce the likelihood and impact if they should occur.

Answer: Information Security is the practice of defending (guiding) information by considering the CIA Triad Principles which are Confidentiality (Authorize access), Integrity (Accuracy and Completeness) and Availability.