Essentials of MIS (13th Edition)
Essentials of MIS (13th Edition)
13th Edition
ISBN: 9780134802756
Author: Kenneth C. Laudon, Jane Laudon
Publisher: PEARSON
Question
Book Icon
Chapter 8, Problem 3RQ
Program Plan Intro

System vulnerability:

  • When huge data amounts are been kept in electronic form, it becomes susceptible to many threats.
  • The information systems in many locations are been interconnected through communication networks.
  • The unauthorized access can occur at many access points in network and is not limited to single location.
  • The data flowing over networks could be accessed; valuable information could be stolen while transmission or data could be altered without authorization.
  • The denial-of-service attacks are launched by intruders to disrupt website operations.
  • Internets are vulnerable than internal networks as it is open to everyone.

Explanation of Solution

Application Controls:

  • Application controls denote specific controls that are exclusive to each application.
  • It includes both manual as well as automated procedures.
  • It ensures that authorized data is been processed by application.
  • The types include:
    • o Input controls:
      • It checks data for correctness as well as completeness while they go in system...

Explanation of Solution

Risk assessment function:

  • A risk assessment would determine risk level to firm if an explicit activity is not controlled properly.
  • The information assets value, vulnerability point, likely problem frequency and damage potential can be determined by business managers.
  • Controls could be added or adjusted to focus on greater risk areas.
  • Security risk analysis would involve determination of what is needed to be protected and the manner to protect.
  • It denotes an examining process for risks of firm and ranking for those risks by severity level.
  • The cost effective decisions are been involved in process...

Explanation of Solution

Security policy, Acceptable use policy and Identity management:

  • A security policy denotes ranking of information risks, identification of acceptable goals of security as well as identification of mechanism to achieve goals.
    • o It drives policies that determine acceptable information resource usage of firm.
    • o It determines access details of company’s information assets.
  • An acceptable use policy denotes acceptable uses of resources of firm and equipment for computing.
    • o It includes desktop, laptop, wireless devices, Internet and telephones.
    • o It clarifies privacy, responsibility of user as well as personal usage for company equipment policies...

Explanation of Solution

Information systems auditing promotes control and security:

  • Information system auditing determines effectiveness of information system security as well as control.
  • An MIS audit would identify all control...

Blurred answer
Students have asked these similar questions
PurposeThis course project is intended to assess your ability to identify, design, and organize information technology (IT) security policies.Learning Objectives and OutcomesSuccessful completion of this project will ensure that you can develop draft IT security policies for an organization and apply learning constructs from the course. By the end of this project, you will be able to do the following:Evaluate compliance laws relevant to the U.S. Department of Defense.Assess policy frameworks appropriate for an organization in a given scenario.Evaluate security controls and standards for the seven domains of a typical IT infrastructure.Develop DoD-compliant policies for an organization’s IT infrastructure.Required Source Information and ToolsWeb References: Links to Web references in this document and related materials are subject to change without prior notice. These links were last verified on January 4, 2022. The following tools and resources will be needed to complete this…
true or false 4. The security policy develops over time and is a living document that the company and security officer must review and update at regular intervals.
A security control is a specific action or procedure provided to protect confidentiality, integrity and availability of information/systems. Explain information security control with respect to the following: (i) Administrative Controls (ii) Technical or Logical Controls (iii) Physical Controls
Knowledge Booster
Background pattern image
Similar questions
SEE MORE QUESTIONS
Recommended textbooks for you
Text book image
Principles of Information Security (MindTap Cours...
Computer Science
ISBN:9781337102063
Author:Michael E. Whitman, Herbert J. Mattord
Publisher:Cengage Learning
Text book image
Management Of Information Security
Computer Science
ISBN:9781337405713
Author:WHITMAN, Michael.
Publisher:Cengage Learning,
Text book image
Fundamentals of Information Systems
Computer Science
ISBN:9781337097536
Author:Ralph Stair, George Reynolds
Publisher:Cengage Learning
Text book image
Principles of Information Systems (MindTap Course...
Computer Science
ISBN:9781305971776
Author:Ralph Stair, George Reynolds
Publisher:Cengage Learning
Text book image
Fundamentals of Information Systems
Computer Science
ISBN:9781305082168
Author:Ralph Stair, George Reynolds
Publisher:Cengage Learning
Text book image
Principles of Information Systems (MindTap Course...
Computer Science
ISBN:9781285867168
Author:Ralph Stair, George Reynolds
Publisher:Cengage Learning