Describe how you would react to the following scenarios: ■ A senior marketing manager informs you that one of her employees is looking for another job and she wants you to give her access to look through her email. A vice president of sales informs you that he has made a deal to provide customer information to a strategic partner and he wants you to burn all of the customer informa- tion onto a CD. You start monitoring one of your employees' email and discover that he is having an affair with one of the other employees in the office. ■ You install a video surveillance system in your office and discover that employees are taking office supplies home with them.

Describe how you would react to the following scenarios: ■ A senior marketing manager informs you that one of her employees is looking for another job and she wants you to give her access to look through her email. A vice president of sales informs you that he has made a deal to provide customer information to a strategic partner and he wants you to burn all of the customer informa- tion onto a CD. You start monitoring one of your employees' email and discover that he is having an affair with one of the other employees in the office. ■ You install a video surveillance system in your office and discover that employees are taking office supplies home with them.

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Similar questions

TO: All Staff FROM: Jake Ryan, Director, Product Development DATE: October 23, 2018 SUBJECT: Launch of Product XYZ Due to extensive customer feedback, and the results of current testing, I wanted to inform you that Product XYZ will be delayed from its original launch date of November 15th, until Q1 2019. We are confident that time for additional testing will serve to make XYZ more effective in fighting security breaches that customers are facing. For those customers that you believe will now consider a competitor's product, the marketing department is developing a promotional offering, which sales reps can share with their customers to help reduce those who will now go to our competitors. As disappointing as this news may be, we are confident in our employees, and know the additional time will serve this company well by creating a more successful product.
A security policy is a document that provides employees with clear instructions about acceptable use of company confidential information, explains how the company secures data resources and what it expects of the people who work with this information. Most importantly, the policy is designed with enough flexibility to be amended when necessary. You are working in organization X, and you are supposed to develop an issue-specific security policy issue is MOBILE COMPUTING To develop the different sections of your policy, you can refer to SANS Policy Templates https://www.sans.org/information-security-policy/
A company interacts with the customers and is highly based on customer data. It has a weak policy which lets it update it's software only once every two years. Due to this policy a hacker could interact with the software and if there's a critical security issue, it wouldn't be addressed and patched until its updated. The long period between the software updates is a threat. Describe in details what are some policy solutions to overcome this vulnerability. (Please make sure they are specifically policy related, Thank you).( Do fast i have 1 hour
- There are many types of cybersecurity liability policies covering a host of eventualities. What insurance you should buy depends on your business model and your company board's risk appetite. For this discussion, pick one of the five cybersecurity laws, regulations, or policies you wrote about in the Module 5 assignment, and discuss what types of insurance you would recommend in case your company fails at compliance for that requirement. Discuss the risk-reward trade offs, and explain why you think your insurance recommendation is worth the cost.
Objectives Develop questions to gain further insight and help get the client and tester on the same page Create a sample scope for an security assessment Create and revise Rules of Engagement for the test Overview You were given a Request For Proposal (RFP) but it seems to be lacking enough details to determine what the client is requesting for a test. We will need to come up with some information and questions to discuss with the client to determine what exactly they are wanting. This will allow both the client and the tester to be on the same page prior to beginning any assessment. We will be building a Scope and Rules of Engagement (ROE) to determine what is in scope and the document that outlines specifics of the project and how it will occur. Below are some of the key points pulled from the RFP that was lacking a lot of details: The test is for CIT-E Corp with 2,000 employees located throughout the United States They want a penetration test from either an outside company or…
Create a Risk Assessment Plain for this scenario. Scenario: You are an information technology (IT) intern working for Health Network, Inc. (Health Network), a fictitious health services organization headquartered in Minneapolis, Minnesota. Health Network has over 600 employees throughout the organization and generates $500 million USD in annual revenue. The company has two additional locations in Portland, Oregon and Arlington, Virginia, which support a mix of corporate operations. Each corporate facility is located near a colocation data center, where production systems are located and managed by third-party data center hosting vendors. Company Products Health Network has three main products: HNetExchange, HNetPay, and HNetConnect. HNetExchange is the primary source of revenue for the company. The service handles secure electronic medical messages that originate from its customers, such as large hospitals, which are then routed to receiving customers such as clinics. HNetPay is a Web…
Eimi the manager of Company XYZ is having a big trouble since the company is continuously being targeted by a hacker named Rei using 1 poli DDOS Botnet malware. Eimi then choose one of the most unsolicited solution of all, she hired hackers in order to improve the cyber security of the company. Do you think this is a good solution for the company? * Yes, Eimi considers the idea that one way to test and improved the cyber security is to hire ethical hackers that would pinpoint the weakness and flawed of the system thereby strategically improving the cyber security the company as well No, Hiring hackers in order the improve the cyber security is a bad thing. All hackers are bad that is why they are called hackers Yes, By doing so Eimi addresses the concern of improving the knowledge and information security competency of the users thereby protecting them from psychological manipulative techniques that would compromise information using DDOS Botnet Malware No, Hiring hackers is dangerous…
Assig 1 Evaluating Risk Handling Strategies Learning Objectives and Outcomes ▪ Evaluate appropriate risk-handling strategies for a given scenario. Assignment Requirements The X-Axis is a renowned private cancer hospital located in Las Vegas. The hospital maintains a critical database in-house that includes patient data for all patients. You are the IT security manager at X-Axis. The power from the city to the company's data center has been unstable in recent months. The database was offline twice due to power issues, once for 6 hours and once for 10 hours. You are evaluating the risk to the organization of continued power issues and database availability. For this assignment: 1. Create a table in Microsoft Word similar to the following for avoidance, transference, and mitigation risk- handling strategies. Risk Handling Strategy Description Avoidance Transference Mitigation Fill in each empty cell with a description of at least two appropriate strategies or actions. Self-Assessment…
Your company needs you to define the policies/standards and solutions for internal employee systems as well (company network, etc.). Briefly describe how you would tackle the following: Users are authenticated with password-based method Discuss the method, Discuss the policies/standards you recommend Describe the solution functionally Discuss if and how users could/would be authenticated using or a second method of authentication/verification Discuss the potential method, Functionally how it could work Include any sources you are using to answer including websites, books, and papers from conference and journals.
Data Security is considered a senior Management concern and responsibility. It affects every company’s operation, reputation and ultimately impacts revenue, profits, and a competitive edge. Yet many companies do not implement defenses that could help to prevent and control data breaches. In June 2012 LinkedIn a business social network site was hacked, this data breach was discovered when IT security experts discovered millions of LinkedIn passwords on a Russian underground site. The reason this happened was that the company was using outdated encryption methods and within 2 days, most passwords were cracked. What steps can a business take to keep control of its data security? What security management processes and activities in each process should a business follow to ensure they have an Information Technology Risk management strategy in place?
It appears that someone is using your firm's corporate directory-which includes job titles and email addresses-to contact senior managers and directors via email. The email requests that the recipient click on a URL, which leads to a Web site that looks as if it were designed by your Human Resources organization. Once at this phony Web site, the employees are asked to confirm the bank and account number to be used for electronic deposit of their annual bonus check. You are a member of IT security for the firm. What can you do? 1. develop a problem statement, 2. identify alternatives, 3. evaluate and choose alternatives, 4. (how you would) implement decision, and 5. (how you would) evaluate results. Make sure that each step of the process is labeled and that each part of the question is answered.
Congratulations on your promotion to "Network level" guy. One of your first tasks as an employee was to fulfill a delivery to Mr. XYZ, as requested by your boss over the phone. Avoid having anything taken out of or added to this package. Just what are your long-term objectives? You've never dealt with something quite so secure before. The employer also cautioned you to remember that the security at the office gate would almost probably question the contents of the box and may ask for it to be altered before you can deliver it.