Title: Module 2 Objectives and Activities List
Course: IN 2001 Principle of Information Assurance > Section: Module 2: Chapter Two

Learning Objectives

By successfully completing this module, the student will be able to:

- Demonstrate that organizations have a business need for information security
- Explain why a successful information security program is the responsibility of both an organization’s general management and IT management
- Identify the threats posed to information security and the more common attacks associated with those threats, and differentiate threats to the information within systems from attacks against the information within systems
- Describe the issues facing software developers, as well as the most common errors made by developers, and explain how software development programs can create software that is more secure and reliable

Learning Activities

- Read Chapter 2
- Read Instructor notes

Overview:

Chapter 2 examines the business drivers behind the security analysis design process.  It examines current needs for security in organizations and technology.  One principle concept is that information security is primarily an issue of management, not technology.  Best practices apply technology only after considering the business needs.

The chapter also examines the various threats facing organizations and presents the process of ranking these threats to provide relative priority as the organization begins the security planning process.  The chapter continues with a detailed examination of the types of attacks that could occur from these threats, and discusses how they could impact the organization’s information and systems.  The chapter concludes with a further discussion of the following key principles of information security, some of which were introduced in Chapter 1: confidentiality, integrity, availability, authentication and identification, authorization, accountability and privacy.

Assessment Activities

- Complete Discussion Question 2
- Complete Exercise 2
- Complete Quiz 2