From the list of rules, regulations and standards given in table 3.4, which standards do you think has the most impact on safeguarding the security of personal information and which of these standards have minimal impact on you personally?

Question

Where does an organization's information security begin and finish, in your opinion? To put it another way, when does a company's security policy and measures go into action, and when do they stop? Do you think any of these restrictions will be lifted in the future? Explain how and why if this is the case. What would be the cause if not?

Answer 1

Question

Chapter 3, Problem 5DQ

Program Plan Intro

From the list of rules, regulations and standards given in table 3.4, which standards do you think has the most impact on safeguarding the security of personal information and which of these standards have minimal impact on you personally?

Expert Solution & Answer

Trending nowThis is a popular solution!

See solution

Check out sample textbook solution

Students have asked these similar questions

Where does an organization's information security begin and finish, in your opinion? To put it another way, when does a company's security policy and measures go into action, and when do they stop? Do you think any of these restrictions will be lifted in the future? Explain how and why if this is the case. What would be the cause if not?

Here's an excerpt from the article on the Electronic Frontier Foundation website: The EU's proposed Child Sexual Abuse Regulation (CSAR) is a disappointing step backwards. In the past, the EU has taken the lead on privacy legislation that, while not perfect, has moved in the direction of increasing, rather than decreasing, peoples' privacy, such as the General Data Protection Regulation (GDPR) and the e-Privacy Directive. But the CSA Regulation goes in the opposite direction. It fails to respect the EU Charter of Fundamental Rights and undermines the recently adopted Digital Services Act, which already gives powers to authorities to remove illegal content. The proposal requires online platforms and messaging service providers to mitigate abusive content and incentivizes general monitoring of user communication. But If "significant" risks of online sexual child abuse remain after these mitigations- and it's entirely unclear what this means in practice- law enforcement agencies can send…

C. List the components of PKI, then describe each component and its function. What are certification and accreditation when applied to information systems security management? List and describe at least two certification or accreditation processes. You've been hired by an investment company with 500 employees to serve as their Information Systems Security Manager. Your first task from the Chief Information Officer is to write a series of policies and procedures as the company has nothing in place. Where is a good place to start your research? List at least 3 policies and procedures that you would work on first and explain why these three should be considered early. Recommend a password policy. If the C.I.A. triangle is incomplete, why is it so commonly used in security? Explain what value an automated asset inventory system has for the risk identification process?