Title: Class Outline 3
Course: KVCC BUS118 > Section: Class Outlines

1.      Domains of IT infrastructure

a.      User

b.      Workstation

c.      LAN

d.      WAN

e.      LAN to WAN

f.       Remote Access

g.      System/Application

2.      Vulnerabilities – a weakness or flaw in the system

a.      People

i.           Separation of duties – one person knows too much about a critical process.

b.      Process

c.      Facility

d.      Technology

3.      Exploits – attacks that focus on vulnerabilities

a.      0-day – attacks that exploit vulnerabilities before they can be patched.

4.      Threats – anything that can bring harm to a business information system

a.      Human

b.      Natural

c.      Technological and Operational

d.      Physical and Environmental

5.      Risk – the likelihood that a threat will exploit a vulnerability and cause harm.

a.      Risk Avoidance –applying safeguards to avoid negative effects

b.      Risk Mitigation – lowering the risk to an acceptable standard

c.      Risk Transfer – the passing on of risk to somewhere else

d.      Risk Acceptance – deciding to do nothing about risk essentially ignoring it.

6.      Safeguard – reducing the harm from threats and vulnerabilities

a.      Administrative

b.      Technical

c.      Physical

7.      Common Concerns

a.      Shoulder Surfing

b.      Social Engineering

c.      Phishing

d.      Malware

e.      Spyware/Key loggers

f.       Logic Bombs

g.      Backdoors

h.      Denial of service attack

8.      Classifications of Data

a.      Confidential

b.      Public

c.      Secret

d.      Top Secret

9.      Mechanisms that ensure information Security

a.      Laws

b.      Contracts

c.      Organizational Governance

d.      Voluntary Organizations

10.  Laws that govern specific categories of data

Attached Files: | - KVCC BUS118_LegalAspectsBusInfoSys_Class Outlline 3(1).pdf