Computer Hardware and Software PPP - 1&3.pptx

Cost benefit analysis is an important decision point

Info icon This preview shows pages 30–33. Sign up to view the full content.

Cost-benefit analysis - is an important decision point for a business to implement controls or security for any risk, because managers need to evaluate the benefits versus the financial cost for implementing these controls. Risk assessment - determine the likelihood that loss will occur and all targets and sources from which these threats will originate. Businesses must determine the organizational resources they need to protect, the value to be attributed to them, and the time and effort in replacing them, along with the probability of loss and possible sources of the threats. How to mitigate the potential of loss: Environment factors such as weather can be mitigated by - by positioning equipment and facilities in such a way that flooding, drainage, fire, lightning, and risks of earthquake are minimized, usually to the extent of building redundant components, systems, and facilities in preparation for disastrous events. Environmental factors are the simplest (but not necessarily the easiest) for organizations to mitigate risk. These risks can be mitigated by duplicating or moving equipment or facilities to low-risk areas in order to minimize the potential damage that might occur. Create succession plan Auditing control - Auditing controls are implemented to monitor employees’ access to corporate data resources. Training and careful planning Policy and Procedures Password authentication factors Encryption for out going and incoming email
Image of page 30

Info icon This preview has intentionally blurred sections. Sign up to view the full version.

To protect these contents, an organization would need to understand the answer to several questions: Value of potential lost of resources Probability of loss Value of security and control Standardization of Information Management : ISO 9000, which deals with quality management ISO 27001, which deals with information security management ITIL and COBIT, which deal with the management of an information technology infrastructure. Information Technology Infrastructure Library (ITIL) provides a framework of best practices for creating and improving IT infrastructure that allows organization to organize, prioritize, and approve changes to IT infrastructure Ensures unknown equipment are not installed to the network with key peoples knowledge Establish security program Define specific or general risk that will be responsible for handling General controls – A type of control that manages the arrangement, operation, and security of systems software, and protects the data files throughout an organization’s IT infrastructure.
Image of page 31
Safeguarding information resources Methods of authentication: Knowledge(something you know) - PIN, passwords, patterns, and signature Possession(something you have) – security key, rolling codes devices, RFID tokens, cellphone, and badges Identity(something you are) – photo identification, biometrics(i.e. fingerprints, voice, patterns, hand/palm prints, retina, or iris topology) Prevention methods: Computer-based actions include those actions that require the use of a computer to apply. Awareness, understanding threats, minimizing or
Image of page 32

Info icon This preview has intentionally blurred sections. Sign up to view the full version.

Image of page 33
This is the end of the preview. Sign up to access the rest of the document.
  • Fall '18
  • Computer program, C763 PPP Chapter 1-3

{[ snackBarMessage ]}

What students are saying

  • Left Quote Icon

    As a current student on this bumpy collegiate pathway, I stumbled upon Course Hero, where I can find study resources for nearly all my courses, get online help from tutors 24/7, and even share my old projects, papers, and lecture notes with other students.

    Student Picture

    Kiran Temple University Fox School of Business ‘17, Course Hero Intern

  • Left Quote Icon

    I cannot even describe how much Course Hero helped me this summer. It’s truly become something I can always rely on and help me. In the end, I was not only able to survive summer classes, but I was able to thrive thanks to Course Hero.

    Student Picture

    Dana University of Pennsylvania ‘17, Course Hero Intern

  • Left Quote Icon

    The ability to access any university’s resources through Course Hero proved invaluable in my case. I was behind on Tulane coursework and actually used UCLA’s materials to help me move forward and get everything together on time.

    Student Picture

    Jill Tulane University ‘16, Course Hero Intern