Chapter 16 - HRIS Privacy & Security

Question 1

Why is privacy critically important?

Answer 1

An HRIS includes a great deal of confidential data about EEs (SIN, Banking info, P.M….)
Therefore, an own needs to understand what EE data is collected, stored, shared, & manipulated.
Consider internal and external threats to the system and develop strong security plans to protect data and comply with legislative mandates.

Question 2

What are some EE privacy issues?

Answer 2

• unauthorized access to or disclosure of info
• stigmatization problems
• use of data in social network websites
• lack of privacy protection policies

Question 3

What is the McCumber Cube?

Answer 3

A tool for an analyst to ID the info flows within an HRIS, view it for important security-relevant factors, and then map the finding in the cube.
Desired Info Goals (ensure data is kept confidential, has not be manipulated, and available to those who are authorized)
Countermeasures (ID mechanisms that can be used to protect data)
State of Info (ID the state in which data is current residing)

Question 4

What are sources of security threats?

Answer 4

• human error
• disgruntled EEs and ex-EEs
• other ‘internal’ attackers
• external hackers
• natural disasters