Đang chuẩn bị nút TẢI XUỐNG, xin hãy chờ
Tải xuống
Chapter 4 information security and controls. This chapter presents the following content: Introduction to information security, unintentional threats to information systems, deliberate threats to information systems, what organizations are doing to protect information resources, information security controls. | 16-10-10 INFORMATION SYSTEMS Supporting and Transforming Business Fourth Canadian Edition RAINER • PRINCE • SPLETTSTOESSER • SÁNCHEZ-RODRÍGUEZ CHAPTER 4 Information Security and Controls CHAPTER OUTLINE • • • • 4.1 Introduction to Information Security 4.2 Unintentional Threats to Information Systems 4.3 Deliberate Threats to Information Systems 4.4 What Organizations Are Doing to Protect Information Resources • 4.5 Information Security Controls 1 16-10-10 LEARNING OBJECTIVES 1. Identify the five factors that contribute to the increasing vulnerability of information resources, and provide a specific example of each one. 2. Compare and contrast human mistakes and social engineering, and provide a specific example of each one. 3. Discuss the ten types of deliberate software attacks. 4. Define the three risk mitigation strategies. 5. Identify types of controls that organizations can use to protect their information resources and provide an example of each one. OPENING CASE 4.1: THE SONY PICTURES ENTERTAINMENT HACK The problem In November 2014, hackers successfully penetrated the SPE information systems and copied terabytes of data that included confidential personal information about SPE employees and their dependents. The hackers also accessed unreleased movies and other corporate data. The hack was accompanied by threats of terrorist action around the release of a film called “The Interview.” Source: Karen Rouch/Shutterstock OPENING CASE (CONTINUED) Responses The FBI launched an investigation and claimed that the North Korean government was responsible for the attack Sony pulled the movie and cancelled showings of scheduled dates. Large cinema chains followed suit, cancelling their release of the movie. It was later released to independent theatres and online movie services. 2 16-10-10 OPENING CASE (CONTINUED) The Results There are many “open ends” around the responsibilities of SOE and the U.S. government Neither appear to be capable of .
