Software Engineering (10th Edition)
10th Edition
ISBN: 9780133943030
Author: Ian Sommerville
Publisher: PEARSON
expand_more
expand_more
format_list_bulleted
Question
Chapter 14, Problem 14.4E
Program Plan Intro
Resilient organization:
- System resilience is the judgement which is made to maintain to systems’ critical resources during any disruptive event like cyber-attack or failure of equipment.
- An organization that is flexible and adaptable to use system resilience so as to protect their systems against any type of cyber-attack is known as resilient organization.
- These organizations are socio-technical organizations and have procedures, culture and policies for using any system.
Expert Solution & Answer
Want to see the full answer?
Check out a sample textbook solution
Students have asked these similar questions
Identity theft is a frequent kind of criminal activity that, regrettably, is on the rise owing to the widespread use of the internet. Please describe the many techniques that hackers may use to steal your identity as well as the precautionary steps that, in your view, ought to be taken to ensure that this doesn't happen.
An exhaustive investigation is the first step in determining what constitutes a breach in security.
Malware is anything that may be considered a danger actor.
Knowledge Booster
Similar questions
- In Information security, a threat is a potential negative action or event facilitated by vulnerability that results in an unwanted impact to a computer system or application.a) Elaborate the different types of attacks on computer based systems.arrow_forwardOperating systems and the vast majority of other forms of software include bugs when they are originally released. Existing software contains tens of thousands of errors, sometimes known as bugs. By providing updates, software companies consistently address recognized issues with published software (also known as patches). The day after the public disclosure of a new vulnerability, hackers and other criminals often conduct zero-day attacks to exploit it. No one can disagree that these criminals' activities are immoral, but what obligation does a software company have if their ignorance or hurry to market harms customers? What responsibility do computer users have regarding the installation of security updates?arrow_forwardHow does GRANT affect safety? Are privileges restricted? How are they revoked?arrow_forward
- Cybersecurity Risk Assessments: Probability vs. Possibility. When performing a risk analysis, we want to focus on what is probable versus what is possible. The goal is to make well-informed decisions based on probable outcomes of future events. Is it possible that a grizzly bear will walk through your office door and maul you? Sure! Almost anything is possible. But is it probable? No. As the Head of IT (or IT Security) what are the three most critical risks for your whole organization to mitigate (in tech or security)? Please discuss risk, controls (present or missing), and risk monitoring and effectiveness testing.arrow_forwardSusan is the lead investigator for a security incident and realizes that she will not be able to complete her investigation without causing severe disruption to the business. The action she feels she must take exceedsthe authority granted to her under the incident response plan. What should Susan do? a)Shut down all business operations immediately until she develops a plan b)Take the action immediately to protect the business c)Discount the action as a possibility because it exceeds her authority d)Consult with higher levels of managementarrow_forwardHave you ever observed someone being harassed or bullied by someone else over the internet? What was your first reaction when you found out about the situation? How did you arrive at the judgment that the person had previously been the target of bullying behavior prior to your intervention?arrow_forward
- What measures of self-defense should you take when confronted with the possibility of harm coming your way?arrow_forwardA security policy is a document that provides employees with clear instructions about acceptable use of company confidential information, explains how the company secures data resources and what it expects of the people who work with this information. Most importantly, the policy is designed with enough flexibility to be amended when necessary. You are working in organization X, and you are supposed to develop an issue-specific security policy, you can pick one issue from Table.1 [1] (In the photos) Your Task is: To develop the different sections of your policy and adequate procedure(s), you can refer to SANS Policy Templates [2]. References: [1] Developing an Information Security Policy: A Case Study Approach, Fayez Hussain Alqahtani. 4th Information Systems International Conference 2017, ISICO 2017, 6-8 November 2017, Bali, Indonesia. [2] https://www.sans.org/information-security-policy/arrow_forwardDistinguish between an attack and a threat.arrow_forward
arrow_back_ios
SEE MORE QUESTIONS
arrow_forward_ios
Recommended textbooks for you
Management Of Information SecurityComputer ScienceISBN:9781337405713Author:WHITMAN, Michael.Publisher:Cengage Learning,
Management Of Information Security
Computer Science
ISBN:9781337405713
Author:WHITMAN, Michael.
Publisher:Cengage Learning,