Exam 6: Information Systems Security

An information security system has the basic elements of any information system: hardware,software,databases,procedures,and reports.

You've been hired as the chief security officer of your company.Before long,you learn that one of the operators has been making changes to the accounts receivable database.Upon this discovery,the employee is immediately terminated. Required: List three procedures that you should implement to prevent this problem from happening in the future.

When devising its disaster recovery plan,a company should have a detailed set of recovery strategies and procedures.What are five considerations that should be covered by the company's recovery strategies and procedures?

An information security threat is a potential exploitation of a vulnerability.

Which individual listed below is placed in a position of great trust,normally having access to security secrets,files and programs?

Information security management system is an internal control process and manages ________.

Three major groups of individuals that may attack information systems include information personnel,users,and hackers.

A security system where the user enters an identification number and the system responds with a sign (i.e.,code word)is known as a(n)________ system.

The Treadway Commission has linked ________ ________ to computer crime.

Three major groups of individuals that may attack information systems include information personnel,users,and employees.

________ is a form of social engineering in which one impersonates another typically in a phone call or electronic communication.

Botnets are normally used for which of the following?

Virtualization involves running multiple operating systems,or multiple copies of the same operating system,all on the same machine.

Direct observation includes shoulder surfing and piggybacking.

An alternate site that contains the wiring,equipment,and very up-to-date back-up data and software is a(n)________ site.

What is an example of fault tolerance applied at the transaction level?

GASB statement #34 requires utility companies to maintain business continuity plans.

Software should not be installed on any computer without prior approval of security.

A company which specializes in processing the data of other companies,but not its own,is a(n)

After a planning committee has been appointed and the support of senior management has been obtained,the first step in designing a disaster recovery plan is