For each of the following assets, assign a low, moderate, or high impact level for the loss of confidentiality, integrity and availability, respectively. Give justification for each of your answers. (i) An organization managing public information on its Web server. (ii) A financial organization managing routine administrative information (privacy related information)

For each of the following assets, assign a low, moderate, or high impact level for the loss of confidentiality, integrity and availability, respectively. Give justification for each of your answers. (i) An organization managing public information on its Web server. (ii) A financial organization managing routine administrative information (privacy related information)

Principles of Information Security (MindTap Course List)

6th Edition

ISBN:9781337102063

Author:Michael E. Whitman, Herbert J. Mattord

Publisher:Michael E. Whitman, Herbert J. Mattord

Chapter5: Risk Management

Section: Chapter Questions

Problem 2E

See similar textbooks

Similar questions

In this context, only authorized individuals, processes, or systems should have access to information on a need-to-know basis. What does support the "least privilege" concept? a. Confidentiality b. Incident c. Deterrent Controls d. Availability
The assurance that data received are exactly as sent by an authorized entity is called? a) Data Integrity. b) Data confidentiality. c) Non-Reputation. d) Access Control.
The term "data leakage" refers to the following: What caused it to occur? How and by whom was this accomplished? How can confidential data be protected and detected?
The following is a list of some instances of potential threats to the confidentiality of data: After that, there will be a discussion of the many preventive activities that may be taken.
10. For each of the following assets, examine and assign a low, moderate or high impact levelfor the loss of confidentiality, integrity and availability respectively. Justify your answersa. An organization managing public information on its web server. b. A law enforcement organization managing extremely sensitive investigativeinformation.c. A financial organization managing routine administrative information (notprivacy-related information).
The following assets should be examined and assigned a level of effect ranging from low to moderate to high depending on the degree of secrecy and integrity lost, as well as availability lost. Justify your responses to a. This is an organization that manages public information on its website server. an investigational information management organization that deals with highly sensitive investigative material.c. A financial entity that manages regular administrative information (not information pertaining to personal privacy).
Your thoughts about the relevance of maintaining the safety of data both while it is being carried and while it is being stored are best expressed by which of the following phrases? Which of these options affords a more robust degree of security not just for the data but also for the identity of the user?
When does the responsibility for protecting a company's data begin and end? When do security policies and procedures begin to have an effect in a given company, and when do they end? Is it possible, in your opinion, to increase these bounds?
Identify the existence of penetration testing. In terms of data security?
Please offer a non-technical example of identity, authentication, and authorisation to demonstrate your comprehension of the concepts. What if a corporation just handles authentication and not authorization?
What are some of the data security risks? Then, consider potential countermeasures.
Each of the following is a successive layer in which information security is achieved except a. products b. purposes c. procedures d. people