Question 1

Alan Westin's Four States of Privacy

Accepted Answer

``` Solitude Intimacy Anonymity Reserve (p4) ```

Question 2

Helen Nissenbaum's Contextual Integrity

Accepted Answer

Privacy can be expressed as norms that should govern information access. Norms are: Domain specific & Context specific. (p5)

Question 3

Daniel Solove's Taxonomy of Privacy

Accepted Answer

``` Privacy is understood through the activities and mechanisms that violate privacy. E.g.: Interrogation and surveillance Secondary use Appropriation or distortion (p5) ```

Question 4

Ryan Calo's Harm Dimensions

Accepted Answer

Objective harm: A person's privacy has been violated and a direct harm is known to exist. The harm is measurable and observable. Subjective harm: Exist without an observable or measurable harm, but an expectation of harm exists. (p5)

Question 5

Privacy risk

Accepted Answer

The LIKELIHOOD that privacy threat will exploit an IT vulnerability, and the IMPACT of this exploit on the individual and the organization. (p6)

Question 6

Threat agent

Accepted Answer

The source of a threat. p6

Question 7

Insider threat

Accepted Answer

When the source of a threat is internal to an organization. p6

Question 8

Identity theft

Accepted Answer

When someone steals personal information and uses it to conduct fraudulent transactions. (p6)

Question 9

An administrator wants to limit access to a data set to employees working in a certain location. Which of the following would he use? A) Attribute-based access control (ABAC) B) Role-based access control (RBAC) C) Discretionary access control D) Mandatory access control

Accepted Answer

A) Attribute-based access control (ABAC)

Brainscape's Knowledge GenomeTM

Part C: Risk Management: 1.11 Risk Management Process Flashcards

Brainscape's Knowledge Genome^TM