Discussion Questions

1. Why are computer systems so vulnerable?

2. Why should information security be a prime concern to management?

3. Is security a technical issue? A business issue? Both? Support your answer.

4. Compare information security in an organization with insuring a house.

5. Why are authentication and authorization important to e-commerce?

6. Why is cross-border cybercrime expanding rapidly? Dis-cuss possible solutions.

7. Discuss why the Sarbanes-Oxley Act is having an impact on information security.

8. What types of user authentication are used at your university and/or place of work? Do these measures seem to be effective? What if a higher level of authentication were implemented? Would it be worth it, or would it decrease productivity?

9. Why are federal authorities so worried about SCADA attacks?

Problem- Activities

1. A critical problem is assessing how far a company is legally obligated to go in order to secure personal data. Because there is no such thing as perfect security (i.e., there is always more that you can do), resolving this question can significantly affect cost

a. When are security measures that a company imple-ments sufficient to comply with its obligations?

b. Is there any way for a company to know if its security measures are sufficient? Can you devise a method for any organization to determine if its security measures are sufficient?