1 3. Discussing the Three Areas of Information Security Great Granola Inc. is a small business operating out of northern California. The company spe- cializes in selling homemade granola, and its primary sales vehicle is through its website. The company is growing exponentially and expects its revenues to triple this year to $12 million. The company also expects to hire 60 additional employees to support its growth. Joan Martin, the CEO, is aware that if her competitors discover the recipe for her granola, or who her primary customers are, it could easily ruin her business. Martin has hired you to draft a document discuss- ing the different areas of information security, along with your recommendations for providing a secure ebusiness environment.

1 3. Discussing the Three Areas of Information Security Great Granola Inc. is a small business operating out of northern California. The company spe- cializes in selling homemade granola, and its primary sales vehicle is through its website. The company is growing exponentially and expects its revenues to triple this year to $12 million. The company also expects to hire 60 additional employees to support its growth. Joan Martin, the CEO, is aware that if her competitors discover the recipe for her granola, or who her primary customers are, it could easily ruin her business. Martin has hired you to draft a document discuss- ing the different areas of information security, along with your recommendations for providing a secure ebusiness environment.

Fundamentals of Information Systems

9th Edition

ISBN:9781337097536

Author:Ralph Stair, George Reynolds

Publisher:Ralph Stair, George Reynolds

Chapter10: Ethical, Legal, And Social Issues Of Information Systems

Section: Chapter Questions

Problem 2CE

See similar textbooks

Similar questions

10. For each of the following assets, examine and assign a low, moderate or high impact levelfor the loss of confidentiality, integrity and availability respectively. Justify your answersa. An organization managing public information on its web server. b. A law enforcement organization managing extremely sensitive investigativeinformation.c. A financial organization managing routine administrative information (notprivacy-related information).
This week, your flooring sales and installation company client wants you to explain the different kinds of attack threats their business faces from hackers. Write a 1- to 2-page memo or create a 1- to 2-page table that summarizes attack threats from hackers to any business, noting which are applicable to your client's business; how the vulnerabilities in a system can be exposed; and countermeasures that can mitigate against threats from attack. Describe sniffing attacks, identify a protocol that is vulnerable to sniffing, and suggest appropriate countermeasures. Describe session hijacking, provide an example of a specific threat from session hijacking, and recommend appropriate countermeasures for the threat. Describe spoofing, provide an example of a specific threat from spoofing, and recommend appropriate countermeasures for the threat. Describe poisoning attacks, provide an example of a specific threat from a poisoning attack, and recommend appropriate countermeasures…
Question 1 Which of the following correctly describes the difference between privacy and security? Privacy is about the individual's control over sensitive information pertaining to the individual; security is about the methods used to provide control over information. Privacy is about controlling access to personal information; security is about controlling access to company information. None of the listed choices are correct. Privacy and security refer to the sets of controls used to protect information. Question 2 Extended service agreements which run for 3 more years require that Sifers-Grayson provide software maintenance and patches for SCADA systems sold more than fifteen years ago. The engineering workstations used to provide this support take up 500 sq ft of space in the R&D lab and, due to their reliance on Windows XP, present security vulnerabilities which need to…
In 2006, Hewlett-Packard Development Company LP became embroiled in a controversy over methods used toinvestigate media leaks from its board. HP Chairperson Patricia Dunn could have simply asked the directors who was the source cited in the story, sought an apology and gone from there. With some direct face-to-face communication, the story would likely have ended quickly. It did not. “Not only did investigators impersonate board members, employees and journalists to obtain their phone records, but according to multiple reports, they also surveilled an HP director and a reporter for CNet Networks Inc. They sent monitoring spyware in an e-mail to that reporter by concocting a phoney tip. They even snooped on the phone records of former CEO and Chairperson Carly Fiorina, who had launched the quest to identify media sources in the first place.” The situation continued to escalate. For example, the New York Times reported that HP consultants even considered planting clerical or custodial…
Human error or failure can be described as acts performed without intent ormalicious purpose or ignorance by an authorised user.Considering the statement above, discuss how social engineering is one of the actsthat necessitate the need for information security for any finance industryorgansiation. In your answer, you must state what social engineering is and use anytwo types or forms of social engineering in the context of information security asexamples.
Iris called the company’s security hotline. The hotline is an anonymous way to report suspicious activity or abuse of company policy, although Iris chose to identify herself. The next morning, she was called to a meeting with an investigator from corporate security, which led to more meetings with others from corporate security and then with the director of human resources and Gladys Williams, the CIO of SLS. Should Iris have approached Henry directly, or was the hotline the most effective way to take action? Why do you think so?
Question 15 kk.Regarding security procedures, discuss the following: What are Security Procedures? What is the relationship Between Security Policies and Security Procedures? Why are security procedures needed in an organization? Full explain this question and text typing work only We should answer our question within 2 hours takes more time then we will reduce Rating Dont ignore this line
This week we learned about information security, its threats, and vulnerabilities. Using the Web or Regent Library resources, find another source of information about threats and vulnerabilities. Share your findings about current threats and vulnerabilities. State why information security is aligned with the mission of Regent University - "Regent University serves as a center of Christian thought and action to provide excellent education through a biblical perspective and global context equipping Christian leaders to change the world".
Iris called the company’s security hotline. The hotline is an anonymous way to report suspicious activity or abuse of company policy, although Iris chose to identify herself. The next morning, she was called to a meeting with an investigator from corporate security, which led to more meetings with others from corporate security and then with the director of human resources and Gladys Williams, the CIO of SLS. Should Gladys call the legal authorities? Which agency should she call?
2. What is information security governance? Who in the organization should plan for it? Supplementary Materials  Pfleeger, C.P., Pfleeger, S.L., & Margulies, J. (2015). Security in Computing 5 th Edition. Pearson Education.  Stallings, W., & Brown, L. (2015). Computer security. Principles and Practice 3rd Edition. Pearson Education  Schou, C., & Hernandez, S. (2014). Information Assurance Handbook: Effective Computer Security and Risk Management Strategies. McGraw Hill Professional.  Agrawal, M., Campoe, A., & Pierce, E. (2014). Information security and IT risk management. Wiley Publishing.
Discuss the security implicationsFrom the perspective of your department and management level, discuss the implications of a security breach in the company's infrastructure (all forms - human, technology etc.) 1. Suggest TWO reasons why such breaches could occur and state how they can be avoided. Based on the above requirements above, critique the below discussion: A security breach is the loss of management, compromising, illicit public disclosure, unapproved acquiring, or acquisition, or any similar event in which sensitive data is accessed or potentially obtained by someone other than an authorized user, or in which a verified user accesses privately apparent data with a purpose other than that for which it is approved.A cyberattack and data breach at Trading could have a negative effect on the company's bottom line. It might harm your company's reputation and cause customers to lose faith in you. And both large and small businesses may be impacted by this. Furthermore, a…
Q(2) Hi there, Please answer all the five multiple choice questions. No written explanation needed for all the questions. Thank you in advance. [6] Which of the following risk mitigation strategies will allow Ann, a security analyst, to enforce least privilege principles? A User rights reviews B. Incident management C. Risk based controls D. Annual loss expectancy [7] A forensic analyst is reviewing electronic evidence after a robbery. Security cameras installed at the site were facing the wrong direction to capture the incident. The analyst ensures the cameras are turned to face the proper direction. Which of the following types of controls is being used? A. Detective B. Deterrent C. Corrective D. Preventive [8] A company that purchased an HVAC system for the datacenter is MOST concerned with which of the following? A. Availability B. Integrity C. Confidentiality D. Fire…