Information Security Management System

A threat assessment is where all possible direct and indirect threats are identified and what

Confidentiality is a right a person has in which to keep information about themselves private without anyone else being able to access it unless given permission or consent by an authorised person. A person's information should only be disclosed on a need to know basis i.e official bodies or next of kin unless specified otherwise. Information may also be disclosed if the information that is being held outweighs the risk to the person's health.

2. Confidentiality: Privacy or secrecy, limited to the people authorized to use the documents or information. Example, the therapists must

Confidentiality: Is not sharing verbal/ written information without permission, also not discussing one individual with another.

7. Which of the following is any weakness in a system that makes it possible for a threat to cause it harm?

Confidentiality is the term used to prevent the disclosure of information to unauthorized individuals or systems. Information has value, especially in today’s world and it has to be kept safely to avoid unnecessary breach of information, an important way of keeping or protecting information

Confidentiality is “the property that is information is not made available or disclosed to unauthorized individuals, entities or processes”. The problem of the confidentiality occurs when an unauthorized person, entity or

Threat: a category of objects, persons, or other entities that presents a danger to an asset

There were a number of factors that contributed to the breach, which had they been addressed or had corresponding mitigation responses in place, would have reduced the likelihood that the breach would have taken place, or at a minimum reduce the impact of the attack. These items range from policy related issues, technology implementations, and security management and maintenance. Although I believe a number of these areas were in the process of being addressed, based on the information gathered regarding the details of the incident, it appears that it was still in many areas insufficient and would not have prevented an incident even if there had been more time available to perform the implementations.

A threat agent is a specific component that represents a danger to an organization’s assets. And a threat is an object, person or entity that represents a constant danger.

Vulnerability: A weakness in the security system, procedure, design or implementation that might be exploited to cause loss or harm.

Confidentiality means that data is concealed and can only be seen by the intended recipient.

Submitted To: Khaled Mahmud Lecturer, Institute of Business Administration, University of Dhaka. Submitted by: Rahimun Anik Haider (ZR-43) Saleh Ahmed (ZR-46) Md. Ashiqur Rahman (ZR-55)

BEING A PROJECT WORK SUBMITTED TO THE DEPARTMENT OF BUSINESS ADMINISTRATION AND MANAGEMENT, SCHOOL OF MANAGEMENT STUDIES, KOGI STATE POLYTECHNIC LOKOJA.

In the partial fulfillment of the requirement of Master of Business Administration (M.B.A.) Program (2002-2004) Hemchandracharya North Gujarat University, Patan.