Securing and Protecting Information Systems

1. Supporting Activity: Effective Controls of Health Care Information

What are three controls that would be effective in protecting health care information?

For each item, describe the risk in your own terms and how the controls address that risk. Also, discuss how applicable the same risks and controls are to other organizations.

2. Supporting Activity: Vulnerabilities in virtualization and in the Cloud

How can a company protect data on corporate laptops? Many companies now store their data in the cloud. Do you think that laptops working with virtualization and the cloud are in more danger than using a workstation? Explain why you think so.

3. Supporting Activity: Value Ranking of Information

How would you rank the value of information today? Present and defend a convincing justification and challenge a classmate's view.

4. Supporting Activity: Disaster Recovery

How would you create a plan for disaster recovery?

What are the factors you would have to take into consideration when setting up your plan? For each factor, describe what you would do to ensure that the data is safe.

Running Case: StratifiedCustom Manufacturing

5. What U.S. federal laws apply to this situation?

6. What is one of the primary problems found during the implementation planning for thee-discovery project?

7. How does a corporation handle situations like the above where policy non-enforcementor selective enforcement becomes a larger problem?

8. The information systems involved were administrative and operational and had little tono sensitive information on them. How does one go about protecting data at a level thatis commensurate with its sensitivity, value, and criticality when those parameters canchange due to circumstances such as a lawsuit?