Title: Class Outline 20
Course: KVCC BUS203 > Section: Class Outlines

1.      How big is the computer security problem?

a.      Numbers of accounts stolen

i.           Pg 280

ii.           Problems with the data

iii.           Going through the numbers

iv.           Takeaways

1.      Median average cost of computer crime is increasing

2.      Malicious insiders are increasing

3.      Data Loss is the principal cost of computer crime

4.      Mobile devices are a threat

5.      Security safeguards are not foolproof however they can work.

2.      How should you respond to security threats

a.      Take security seriously

b.      Strong passwords

c.      Multiple passwords

d.      Send no valuable data over email/im

e.      Use https

f.       Remove high value assets from computers

g.      Clear cache

h.      Update antivirus

i.        Demonstrate security concern to your coworkers

j.        Follow organizational security directives and guidelines

3.      How should organizations respond to security threats

a.      Create Policies

i.           What sensitive data the organization will store

ii.           How will it process the data

iii.           Whether data will be shared with other organizations

iv.           How employees and others can obtain copies of data stored about them

v.           How employees and others can request changes to inaccurate data

b.      Manage risk

4.      How can technical safeguards protect against security threats

a.      IS pieces relationships

b.      Identification and authentication

i.           Smart Cards

ii.           Biometrics

iii.           Single sign on

c.      Encryption

d.      Firewalls

i.           Perimeter

ii.           Internal

iii.           Packet Filtering

e.      Malware Protection

f.       Design for secure applications

5.      How can data safeguards protect against security threats

a.      Data Safeguards

i.           Data Administration

ii.           Database Administration

1.      Key Escrow

6.      How can human safeguards protect against security threats

a.      Human safeguards for employees

i.           Position definitions

ii.           Hiring and screening

iii.           Dissemination and enforcement

1.      Responsibility

2.      Accountability

3.      Compliance

iv.           Termination

b.      Nonemployees

c.      Account administration

i.           Account Management

ii.           Password Management

iii.           Help Desk policies

d.      Systems procedures

i.           Normal

ii.           Backup

iii.           Recovery

e.      Security Monitoring

i.           Logs

ii.           Testing

1.      Honeypots

iii.           Investigating/Learning

f.       Response to security threats

i.           Have a plan

ii.           Centralized Reporting

iii.           Specific Responses

1.      Speed

2.      Preparation Pays

3.      Don't make problem worse

iv.           Practice

Attached Files: | - KVCC BUS203_BusinessSysInt_Outline 20.pdf