13. A renowned cyber-security consultant, Charles Cresson Wood has said that Information Security is basically people and management issues, rather than a technology issue. In summary, Cyber-security is a “business concern, and not a technical problem”. The above statement underscores the business value of security; carefully evaluate the statement with its implications.

13. A renowned cyber-security consultant, Charles Cresson Wood has said that Information Security is basically people and management issues, rather than a technology issue. In summary, Cyber-security is a “business concern, and not a technical problem”. The above statement underscores the business value of security; carefully evaluate the statement with its implications.

Fundamentals of Information Systems

9th Edition

ISBN:9781337097536

Author:Ralph Stair, George Reynolds

Publisher:Ralph Stair, George Reynolds

Chapter9: Cybercrime And Information System Security

Section: Chapter Questions

Problem 15RQ

See similar textbooks

Similar questions

Why is information security a management problem? What can management do that technology cannot? What is USA PATRIOT Act? What is the primary purpose? What is a policy? How does it differ from a law? Provide an example of a policy and an example of a law. How do both relate to Information Security?
Assume that information security in schools necessitates the use of a security model. Analyze each cell using the CNSS model, then offer a brief comment about how you would treat the cell's three components.
Take a look at the role and importance of a company's commission for the investigation of abuse of power (CIAA), as well as a solid data security plan and implementation.How can employee privacy, business network security, and physical security be balanced?
Assume that the usage of a security model is required for information security in schools. Analyze each cell using the CNSS model, then provide a quick remark on how you would handle the cell's three components.
Answer the given question with a proper explanation and step-by-step solution. 1. What member of an organization should decide where the information security function belongs within theorganizational structure? Why? 2. List and describe the options for placing the information security function within the organization. Discussthe advantages and disadvantages of each option. 3. For each major information security job title covered in the chapter, list and describethe key qualifications and requirements for the position. 4. What factors influence an organization’s decisions to hire information security professionals? 5. Prioritize the list of general attributes that organizations seek when hiring information securityprofessionals. In other words, list the most important attributes first. Use the list you developed to answerthe previous review question. 6. What are critical considerations when dismissing an employee? Do they change accord- ing to whether thedeparture is friendly or…
Analyze the threats and attacks in the context of information security. Provide concrete evidence to back up your claims.
Discuss how each of the 10 most recent cyberattacks on computer networks and information security affects one or more of the foundational tenets of security once you have familiarized yourself with the assaults.
1. What is the difference between a threat agent and a threat? 2. What is the difference between vulnerability and exposure? 3. How is infrastructure protection (assuring the security of utility services) related to information security? 4. What type of security was dominant in the early years of computing? 5. What are the three components of the C.I.A. triangle? What are they used for? 6. If the C.I.A. triangle is incomplete, why is it so commonly used in security? 7. Describe the critical characteristics of information. How are they used in the study of computer security? 8. Identify the six components of an information system. Which are most directly affected by the study of computer security? 9. Why is the top-down approach to information security superior to the bottom-up approach? 10. Which members of an organization are involved in the security system development life cycle? Who leads the process?
Produce a simple written guideline detailing and recommending how an organization can effectively ensure that everydocument that a prospective employee presents in the application process is genuine. This question is related to Knowledge of Information Security in general and Employee Information Security
6. What is it and how are misuse or abuse cases help security engineers design measures to protect a system from specific threats?
10. For each of the following assets, examine and assign a low, moderate or high impact levelfor the loss of confidentiality, integrity and availability respectively. Justify your answersa. An organization managing public information on its web server. b. A law enforcement organization managing extremely sensitive investigativeinformation.c. A financial organization managing routine administrative information (notprivacy-related information).
Exactly where do you think the responsibility for a company's information security ends and where does it begin, according to you? When does a company have complete say over the activation and deactivation of its various layers of security protection? Let me know if you think any of these outlines need to be adjusted upwards.