Week 2

Question 1

What are the components of an Information System

Answer 1

-Software
-Hardware
-Data
-People
-Procedure
-Network

Question 2

-An IS includes application (programs), OS, and assorted command utilities.
-is perhaps the most difficult IS components to secure
-carries the lifeblood of information through an organization

Answer 2

Software

Question 3

The physical technology that houses and executes the software, stores and transport data, and provides interfaces for the entry and removal of information from the system.

Answer 3

Hardware

Question 4

Policies deal with hardware as a physical asset from harm or theft.

Answer 4

Physical security

Question 5

Data stored, processed, and transmitted by a computer system must be protected.

-Data is the most valuable asset of an organization and therefore is the main target of intentional attacks

Answer 5

Data

Question 6

Though often overlooked in computer security considerations, _____ have always been a threat to information system.

Answer 6

People

Question 7

Are written instructions for accomplishing a specific task. When an unauthorized user obtains an organization’s procedure, it poses a threat to the integrity of the information.

Answer 7

Procedure

Question 8

2 APPROACHES TO INFORMATION SECURITY IMPLEMENTATION

Answer 8

Bottom-Up Approach
Top-Down Approach

Question 9

A method of establishing security policies and/or practices that begins as a grassroots in system administrator attempt to improve the security of their systems.

Answer 9

Bottom-up approach

Question 10

A methodology of establishing security policies and/or practices that is initiated by upper management.

Answer 10

Top-down approach

Question 11

a methodology for the design and implementation of an information system. Using a methodology ensures a rigorous process with clearly defined goal and increases the probability of success.

Answer 11

SDLC

Question 12

A type of SDLC in which each phrase of the process “flows from” the information gained in the previous phase, with multiple opportunities to return to previous phase, with multiple opportunities to return to previous phases phrase and make adjustments.

Answer 12

Waterfall model

Question 13

WATERFALL MODEL
-A type of SDLC in which each phrase of the process “___ ____” the information gained in the previous phase, with multiple opportunities to return to previous phase, with multiple opportunities to return to previous phases phrase and make adjustments.

Answer 13

flows from

Question 14

6 type of Waterfall model

Answer 14

Investigation
Analysis
Logical Design
Physical Design
Implementation
Maintenance and Change

Question 15

-Begins by examining the event or plan that initiates the process
-During this phase, the objectives constraints, and scope of the project and specified.

Answer 15

Investigation

Question 16

-This phase consists primarily of assessment of the organization, its current systems, and its capability to support the proposed systems
-Begin by determining what the new system is expected to do and how it will interact with existing systems.

Answer 16

ANALYSIS

Question 17

Begin in creating a streams solution for a business problem. In any system solution, the driving factor must be the business need.

Answer 17

logical design

Question 18

-Specific technologies are selected to support the alternatives identified and evaluated in the logical design.

Answer 18

PHYSICAL DESIGN

Question 19

-Any needed software is created.
-Components are ordered, received and tested/ afterwards. Users are trained and supporting documentation created.

Answer 19

IMPLEMENTATION

Question 20

-Longest and most expensive of the process. This phase consists of the task necessary to support and modify the system for the remainder of its useful life cycle.

Answer 20

MAINTENANCE AND CHANGE