Chapter 8, Problem 9HMP

Program Plan Intro

System vulnerability:

• When huge data amounts are been kept in electronic form, it becomes susceptible to many threats.
• The information systems in many locations are been interconnected through communication networks.
• The unauthorized access can occur at many access points in network and is not limited to single location.
• The data flowing over networks could be accessed; valuable information could be stolen while transmission or data could be altered without authorization.
• The denial-of-service attacks are launched by intruders to disrupt website operations.
• Internets are vulnerable than internal networks as it is open to everyone.

Explanation of Solution

Platform to address:

• First platform:
  • o The Windows Vista Ultimate operated by high level administrators has access to areas that other users do not have.
  • o The core system operations are affected by task of administrators.
• Second platform:
  • o The windows server with corporate applications denotes second platform.
  • o The business conduction may be affected if corporate applications are corrupted.
• Third platform:
  • o The Sun Solaris with e-commerce and web servers denote third platform.
  • o The internal operations are ensured to be safe and secure...

Explanation of Solution

Types of control problems:

• The types of control problems includes:
  • o General controls:
    • It governs design, security, and use of computer programs and data file security.
    • It is applied to all computerized applications.
    • It consists of a combination of software, hardware and manual procedures that creates overall control environment.
      • Windows Vista ultimate for high level administrators.
      • Sun Solaris for e-commerce and web servers.
  • o Application controls:
    • It denotes specific controls that are unique to each computerized application.
    • It includes payroll or order processing.
    • It includes both manual as well as automated procedures that ensure authorized data processing.
    • It can be classified as input controls, output controls and processing controls...

Explanation of Solution

Risk of ignoring security vulnerabilities:

• The technical, environmental and organizational threats can be faced by information systems.
• The top priority should be given system security and it should be ensured by managers at all levels.
• The security awareness should be spread to all employees...