Describe how you would react to the following scenarios: ■ A senior marketing manager informs you that one of her employees is looking for another job and she wants you to give her access to look through her email. A vice president of sales informs you that he has made a deal to provide customer information to a strategic partner and he wants you to burn all of the customer informa- tion onto a CD. You start monitoring one of your employees' email and discover that he is having an affair with one of the other employees in the office. ■ You install a video surveillance system in your office and discover that employees are taking office supplies home with them.

Describe how you would react to the following scenarios: ■ A senior marketing manager informs you that one of her employees is looking for another job and she wants you to give her access to look through her email. A vice president of sales informs you that he has made a deal to provide customer information to a strategic partner and he wants you to burn all of the customer informa- tion onto a CD. You start monitoring one of your employees' email and discover that he is having an affair with one of the other employees in the office. ■ You install a video surveillance system in your office and discover that employees are taking office supplies home with them.

Principles of Information Systems (MindTap Course List)

13th Edition

ISBN:9781305971776

Author:Ralph Stair, George Reynolds

Publisher:Ralph Stair, George Reynolds

Chapter14: Ethical, Legal, And Social Issues Of Information Systems

Section: Chapter Questions

Problem 1CE

See similar textbooks

Similar questions

In 2006, Hewlett-Packard Development Company LP became embroiled in a controversy over methods used toinvestigate media leaks from its board. HP Chairperson Patricia Dunn could have simply asked the directors who was the source cited in the story, sought an apology and gone from there. With some direct face-to-face communication, the story would likely have ended quickly. It did not. “Not only did investigators impersonate board members, employees and journalists to obtain their phone records, but according to multiple reports, they also surveilled an HP director and a reporter for CNet Networks Inc. They sent monitoring spyware in an e-mail to that reporter by concocting a phoney tip. They even snooped on the phone records of former CEO and Chairperson Carly Fiorina, who had launched the quest to identify media sources in the first place.” The situation continued to escalate. For example, the New York Times reported that HP consultants even considered planting clerical or custodial…
Create a Risk Assessment Plain for this scenario. Scenario: You are an information technology (IT) intern working for Health Network, Inc. (Health Network), a fictitious health services organization headquartered in Minneapolis, Minnesota. Health Network has over 600 employees throughout the organization and generates $500 million USD in annual revenue. The company has two additional locations in Portland, Oregon and Arlington, Virginia, which support a mix of corporate operations. Each corporate facility is located near a colocation data center, where production systems are located and managed by third-party data center hosting vendors. Company Products Health Network has three main products: HNetExchange, HNetPay, and HNetConnect. HNetExchange is the primary source of revenue for the company. The service handles secure electronic medical messages that originate from its customers, such as large hospitals, which are then routed to receiving customers such as clinics. HNetPay is a Web…
As the number of internet-connected devices hit the roof of billions, the protection of data,preventing it from falling into the wrong hands, and keeping it secure is an increasinglyimportant part of any organization’s ability to manage and protect critical and confidentialinformation.In this regard, you are asked to do some research, and write a report that answers thefollowing points:You should tackle the following points:1. What does the term DLP stand for? Define DLP and its role? 2. There are some common unintentional data loss refrains. State 3 refrains, and listtwo examples of each refrain that causes data loss. 3. Briefly discuss three general causes of data loss. 4. Data protection is a general term that encompasses several measures. Explain threeof these measures. 5. In the light of what you have read about DLP, what do you conclude?
Once a person has been authenticated in an organization's network, that user is granted access to certain data based on the information security concept of least privilege. Your CEO and CIO need authentication and authorisation methods for the company. Recommendations should include strategies for mitigating the effects and hazards posed by vulnerabilities. Be a 9- to 11-slide, multimedia-rich presentation in Microsoft PowerPoint for the WHO (World Health Organization), and make sure to include: Descriptions of at least three jobs performed by members of the organization WHO (World Health Organization). At least three typical attacks on access control techniques, including the password policy vulnerability mentioned in the vulnerability report, are discussed. Countermeasures for reducing vulnerabilities and mitigating possible access control mechanism assaults. A multimedia presentation should contain graphics, images, video clips, or audio.
In 2018, the credit rating agency Equifax disclosed a major data breach involving the personal information of nearly 150 million people. Although Equifax's internal policy required patching critical vulnerabilities within 48 hours, a vulnerability was left unpatched for about 2 months. This was the vulnerability that was exploited by hackers to gain access to the system and obtain the personal information. In this exercise, you will analyze the Equifax incident and consider how the RMF could have helped Equifax prevent the incident. Carefully review this report and identify two vulnerabilities from different organizational levels, such as one vulnerability from Level 3 and one vulnerability from Level 1 or 2. Now think about the seven steps of the RMF. Summarize how these steps could have helped Equifax prevent or mitigate the vulnerabilities you identified. Identify at least one step for each vulnerability.
Discuss the type of security breaches that have occurred in the Flexbooker, how were the breaches discovered, what type of information was accessed by the hackers, and how the security breaches were handled by the companies. Address the revenue lost by the Flexbooker as a result of security breaches. Finally discuss the security team and systems implemented to protect the company from future exposure along with any of your recommendations for the assigned company.
Question 1(a). You are the IT Manager for Arushton Construction Company. The CEO has requested you to provide a one-day training program on IT-related risks for employees or your organization. As part of the preparation for the training, you are to present a report to the CEO covering the following:(i.) Describe four main types of risks that strategic information systems of your organization may face (or be exposed to).(ii.) Discuss things that your organization should do to prevent or minimize each of the risks you described in (i) above.(iii.) Discuss the types of risks that individuals are often vulnerable/exposed to as they use computers and embedded devices for their operations; and explain two things that people can do to prevent or minimize each of those risks.(b). Despite the fact that the coronavirus (COVID-19) pandemic has greatly disrupted operations of governments and organizations across the globe, it has created vast opportunities in many fields of human endeavor.Discuss,…
Your organization regularly handles three types of data: information that is shares with customers, information that it uses internally to conduct business,and trade secret information that offers the organization significant competitive significant competitive advantages.information shared with custoomers is used and stored on web servers,while both the internal business data and the trade secret information are stored on internal file servers and employee workstations. what type of encryption should you use on the file servers for the proprietary data, and how might you secure the data when it is in motion?
Fred Chin, CEO of sequential label and supply, leaned back in his leather chair and propped his feet up on the long mahogany table in the conference room where the SLS Board of Directors had just adjourned their quarterly meeting.“What do you think about our computer security problem?” he asked Gladys Williams, the company’s chief information officer, or CIO. He was referring to last month’s outbreak of a malicious worm on the company’s computer network. Gladys replied, “I think we have a real problem, and we need to put together a real solution, not just a quick patch like the last time.” Eighteen months ago, the network had been infected by an employee’s personal USB drive. To prevent this from happening again, all users in the company were banned from using USB drives. Fred wasn’t convinced. “Can’t we just add another thousand dollars to the next training budget?” Gladys shook her head. “You’ve known for some time now that this business runs on technology. That’s why you hired me as…
Question 1 Which of the following correctly describes the difference between privacy and security? Privacy is about the individual's control over sensitive information pertaining to the individual; security is about the methods used to provide control over information. Privacy is about controlling access to personal information; security is about controlling access to company information. None of the listed choices are correct. Privacy and security refer to the sets of controls used to protect information. Question 2 Extended service agreements which run for 3 more years require that Sifers-Grayson provide software maintenance and patches for SCADA systems sold more than fifteen years ago. The engineering workstations used to provide this support take up 500 sq ft of space in the R&D lab and, due to their reliance on Windows XP, present security vulnerabilities which need to…
In its role regarding the Secure Freight Initiative, the Department of Energy: A. Provides a backup electrical generating system for all US ports of entry to make sure all cargo is inspected in all emergencies B. Monitors all computer components being imported into the country C. Provides funding for radiographic equipment used in scanning cargo D. All of the above Which of the following systems calls upon competing agencies to work in a unified way without battles over territory or responsibility? A. The National Association of Mayors B. The National Governors Association C. The Incident Command System D. The Span of Control System
For the MOVEit malware, please write a short paragraph based on the given background and website info: - the date of the first incident’s report - How does it work, - How one should protect his/her system against this malware - If infected, how one can cope with that? Is there any solution? Ransomware gang Clop, which has taken responsibility for the cyber attack launched against document transfer service MOVEit, has announced that it has not stolen data from companies thought to be impacted by data breaches linked to the attack. These companies include the UK’s British Broadcasting Company (BBC), British Airways and high street health and beauty retailer Boots. Since June 14, Clop has been posting company profiles of companies allegedly impacted by data breaches caused by the cyber attack against MOVEit. These posts are an attempt to pressure victims into paying a ransom to the gang. So far, the names, company addresses and websites of almost 50 victims have been added to the…