Module 5: L1

Question 1

What are some processes an organization needs to have specific information security plans for (5x)?

Answer 1

1. Document preparation and review
2. Online transactions
3. Inventory control
4. Content management
5. Remote access to databases

Question 2

Strategy adjustments have security implications. What are the 3x listed?

Answer 2

1. Systems may change when an intranet is set up
2. New roles of staff may change access to info
3. Decentralized use of computers and smart phones

Question 3

Security must be considered within certain organizational processes like work vs. personal use. What are some of the other considerations mentioned (4x)?

Answer 3

1. Information disclosure rules
2. Physical security measures
3. Breach responses and reporting
4. Prevention of malicious software

Question 4

There are some other ISO norm dimensions mentioned in the lectures like; user access management. What are some others (5x listed)?

Answer 4

1. Management of mobile computing
2. Management of internet access
3. Software development implications
4. Encryption requirements
5. Contingency planning

Question 5

Top management has a central role when implementing IS. What are 3x ways in which they develop organization security objectives?

Answer 5

1. Clarity in policies & procedures: reduce uncertainty in daily activity
2. Maximize regulatory compliance: set fundamental framework
3. Responsibility & accountability: transparency and ownership

Question 6

What are some vehicles for meeting the strategic security objectives?

Answer 6

1. Group cohesiveness: group behavior shapes individual response
2. Management commitment: reward commitment and compliance
3. Training and education: improvement requires learning
4. Ethical and moral values: aspirational environment

Question 7

Implementing means requires a combination of “_______ _______” and “_______ _______”

Answer 7

top down and bottom up

Question 8

T/F: Information security represents another area of uncertainty. It must be held separate from strategic goals.

Answer 8

False.

IS is integral to strategic goals. Should not be considered an “add on”

Question 9

Strategic objectives for IS are _________

Answer 9

multidimensional