Title: Class Outline 4
Course: KVCC BUS118 > Section: Class Outlines

1.      Risk – the likelihood that a threat will exploit a vulnerability and cause harm.

a.      Risk Avoidance –applying safeguards to avoid negative effects

b.      Risk Mitigation – lowering the risk to an acceptable standard

c.      Risk Transfer – the passing on of risk to somewhere else

d.      Risk Acceptance – deciding to do nothing about risk essentially ignoring it.

2.      Safeguard – reducing the harm from threats and vulnerabilities

a.      Administrative

b.      Technical/Logical

c.      Physical

d.      Preventative

e.      Detective

f.       Corrective

3.      Common Concerns

a.      Shoulder Surfing

b.      Social Engineering

c.      Phishing

a.      Spear Fishing

b.      Whaling

d.      Malware

e.      Spyware/Key loggers

f.       Logic Bombs

g.      Backdoors

h.      Denial of service attack

4.      Classifications of Data

a.      Confidential

b.      Public

c.      Secret

d.      Top Secret

5.      Mechanisms that ensure information Security

a.      Laws

b.      Contracts

c.      Organizational Governance

a.      Policies

b.      Standards

c.      Guidelines

d.      Procedures

d.      Voluntary Organizations

a.      SSCP Certification

6.      Laws that govern specific categories of data

Attached Files: | - KVCC BUS118_LegalAspectsBusInfoSys_Class Outlline 4(1).pdf