Case Exercises Amy walked into her office cubicle and sat down. The entire episode WIL the blond man had taken well over two hours of her day. Plus, the police officers had to her the district attomey would also be calling to make an appointment to speak to her, which meant she would have to spend even more time dealing with this incident. She hoped her manager would understand. Questions: 1. Based on this case study, what security awareness and training documents and posters had an impact in this event? 2. Do you think that Amy should have done anything differently? What would you have done in the situation in which she found herself?

Case Exercises Amy walked into her office cubicle and sat down. The entire episode WIL the blond man had taken well over two hours of her day. Plus, the police officers had to her the district attomey would also be calling to make an appointment to speak to her, which meant she would have to spend even more time dealing with this incident. She hoped her manager would understand. Questions: 1. Based on this case study, what security awareness and training documents and posters had an impact in this event? 2. Do you think that Amy should have done anything differently? What would you have done in the situation in which she found herself?

Fundamentals of Information Systems

9th Edition

ISBN:9781337097536

Author:Ralph Stair, George Reynolds

Publisher:Ralph Stair, George Reynolds

Chapter10: Ethical, Legal, And Social Issues Of Information Systems

Section: Chapter Questions

Problem 1CE

See similar textbooks

Similar questions

Exercise. Imagine that you have recently graduated with a BS in information systems. While you did take a few cybersecurity courses in your undergraduate education, you do not have formal training in the subject matter. Sketch out a path for yourself such that you will be a successful security professional. What extra courses should you take? What certifications should you focus on? What path do you see your career taking over the next five to seven years?
Case study 1 Chapter 7 - Investigating Theft Act Assuming you are an agent with the Federal Bureau of Investigation, do the following: 1. Plan and coordinate an investigation in a manner that would not arouse suspicion from Cummings and Baptiste. 2. Create a vulnerability chart to coordinate the various elements of the possible fraud. 3. Assuming your investigation used surveillance and/ or covert investigation techniques, what types of surveillance and/or covert operations would you use? How would technology play a role in this part of the investigation? 4. Finally, how would analysis of physical evidence help in this investigation? What types of physical evidence would be especially helpful?
You were introduced to phishing through your book, there are other methods that cybercriminal use to gain sensitive information. Explain with your own words Vishing (Phishing via voice mail messages) and Smishing (Phishing via text messages) and show how to protect yourself from being a victim for each one (explain at least two procedures to follow). Also, provide at least two references you used.
Question 1a)Using a the shopping situation, explain briefly what is all about computer security, highlighting on prevention, detection and reaction. b) Demonstrate with a programme code structure on how to obtain security information about a computer system. c)Assuming you are the security manager of a firm and you are invited to explain key concepts about your operations to management based on; adversary, attack, countermeasure, risk, security policy, system resource, threat and vulnerability. Convince management by establishing the relevance of your role in the firm.
Interns who appear to be violating many security policies are confronted by the CISO, who hears their complaints. The company claims its employees don't encrypt their computers, listen to music without a license, share files between work and personal devices, waste too much time on social media, and illegally access pornographic material. The CISO suggests drafting a security document (Rules of Behavior) with at least 15 rules outlining the conduct that is and is not acceptable on the company's network.
The interns disapprove when the CISO approaches them. The firm claims they don't secure their workstations, download unauthorized music, link personal gadgets to office computers, spend too much time on social media, and download pornographic information on workplace systems. The CISO suggests creating a security document (Rules of Conduct) with at least 15 rules governing employee behavior on the company network.
Book title: Cybersecurity Essentials - Charles J. BrooksChapter 1 - Infrastructure security in the Real world From the information provided in the first scenario, consider the National Institute of Standards and Technology (NIST) functions detailed in this section and observe how they relate to each category. 1. How to know if someone or something was attempting to access, disable, degrade, or destroy one or more of the devices and/or systems in the substation? 2. How to detect anomalies and events that might impact the operation of the substation (NIST DE.CM-2, 8)? (Refer to screenshot for reference)
The interns disapprove when the CISO approaches them. The firm says they don't secure their workstations, download unauthorized music, link personal gadgets to business computers, spend too much time on social media, and download pornographic stuff on office systems. The CISO suggests creating a security document (Rules of Conduct) with at least 15 rules governing employee behavior on the company network.
- A policy conundrum Your organization has the following statements regarding phishing/social engineering in the employee manual: All employees are required to complete annual security awareness training as provided by the Information Security team. Employees must successfully complete the training and achieve an established minimum score on any quizzes associated with the training. The organization will conduct routine evaluations of the effectiveness security awareness training through simulated phishing tests. Employees that incorrectly identify simulated phishing emails must complete additional security awareness training and their manager will be notified. If an employee incorrectly identifies 3 or more simulated phishing emails, additional action may be taken by the employee’s manager, up to and including termination. Employees are required to report any suspicious emails to the organization’s Information Security team using the Suspicious Mail button located in the…
Computer Science Pick one security law that most interests you with an emphasis on the areas that impact information security and assurance. Write a 1 page summary that includes what it is, what is its purpose/relevance, why is it important, who or what it applies to, ramnifications if not followed, and impact on information and assurance.
A security breach of personal information has resulted in some identity theft over the past three years. What can you do to protect yourself against identity fraud? Give a specific exampl A security breach of personal information has resulted in some identity theft over the past three years. What can you do to protect yourself against identity fraud? Give a specific example of what you mean. e of what you mean.
ASSESSMENT 1. Identify a stakeholder in the maritime industry (port, shipping line, oil rig platforms, ferry, autonomous ships, etc.) of your choice that has been impacted by cyber-criminals and discuss the actual and/or potential implications of the attack. 2. Analyse and evaluate one piece of a regulatory framework that addresses the issue of cyber security, and put forward its strength and weaknesses. Maritime cybersecurity is that the assortment of tools, policies, security ideas, security safeguards, guidelines, risk management approaches, actions, training, best practices, assurance, and technologies want to shield maritime organizations, their vessels, and their cyber setting. 3. Make five recommendations as to what mitigation measures can be taken to against cyber-attacksShips are increasingly using systems that rely on digitalization, integration, and automation, which call for cyber risk management on board. As technology continues to develop, the convergence of information…