test

Question 1

What are the different kind of losses

Answer 1

1. Monetary losses
2. Loss in reputation
3. Loss of compliance to regulation

Question 2

What are the types of decisions made that are affected by poor data

Answer 2

1. Strategic planning
2. Operational planning
3. Management control

Question 3

Types of computer abuse

Answer 3

1. Hacking -
2. Malware -
3. Illegal physical access -
4. Abuse of privileges -

Question 4

Consequences of computer abuse

Answer 4

1. Destruction of assets - hardware, software, data can be destroyed
2. Theft of assets - ^ can be stolen
3. Modification of assets - data can be modified
4. Privacy violation - privacy of personal data compromised
5. Disruption of operations - day to day operations can cease to operate immediately
6. Unauthorized use of data - unauthorized users

Question 5

Cost of computer abuse

Answer 5

1. monetary costs - business market share, government
2. costs - human life, environment

Question 6

Definition of auditing

Answer 6

the process
of collecting and evaluating evidence to
determine whether a computer system
safeguards assets, maintains data integrity,
allows organizational goals to be achieved
effectively, and uses resources efficiently.

Question 7

4 foundations of IS auditing

Answer 7

1. Infosystems management - technical know how of how to do
2. Traditional auditing - forms base knowledge content about auditing using knowledge from traditional auditing
3. Computer science - technical know how on how tor rectify errors
4. Behavioral science - non-compliance generated from human so what are the conditions that cause humans to be non compliant

Question 8

4 objectives of IS auditing

Answer 8

1. Asset safeguarding
2. Data integrity
3. System efficiency
4. System effectiveness

Question 9

What can standards help with

Answer 9

1. Provide a set of best practices to follow
2. Framework for organizations to rate themselves and certify themselves
3. Framework for collaboration with other companies

Question 9

Definition of standards

Answer 9

Mandatory activities, actions, rules or regulations that are used to provide support to policies to make it meaningful and effective.

Provide common standard for security evaluation

Question 10

What are policies and procedures

Answer 10

Set of documents that describe the org policies for operation and procedures necessary to fulfil the policies.

Policies are usually based on management’s goals or adoption of best practices from standards

Procedures are usually just steps in order to fulfil a task which is in line with the policies