Flashcards
CMIS 351 Lesson 12 Managing Information Security and Privacy
Flashcards do conjunto (14)
- 1identity theft-stealing, misrepresenting, or hijacking identity of another person or business
- 2How to protect yourself from identity theft1. ask why someone needs info. and what they will use it for before providing it
2. shred personal/financial info.
3. carry only ID and credit cards you will need that day
4. cut up expired and unused credit cards
5. do not give personal info. to anyone who phones/emails unless you know them - 3Personal Info. Protection and Electronic Documents Act (PIPEDA)-individuals have right to know why org. collects, uses, or discloses personal info.
-governs how data are collected and used - 4Why Canadian business profs. need to be aware of PIPEDA-orgs. should not be able to use info. collected for any purpose other than what org. agreed to use it for
-duty of org. to protect info. they collect - 5Sources of Security Threats-human errors and mistakes
-malicious human activity
-natural events and disasters - 6Elements of Security Program-senior management involvement
-safeguards
-incident response - 7Technical Safeguards-identification and authentication
-encryption and firewalls
malware protection
-malware safeguards - 8Data Safeguards-encryption keys
-backup copies
-physical security
-third party contracts - 9Human Safeguards (Employees)-user accounts considerations
-hiring and screening employees
-dissemination
-enforcement of policies
-termination - 10Human Safeguards (temporary personnel and vendors)-screen personnel
-training/compliance
-contract include specific security provisions
-provide accounts and passwords with least privileges - 11Human Safeguards (public users)-harden web site and facility
-(take extraordinary measures to reduce system's vulnerability) - 12Human Safeguards (partners and public)-protect from internal company security problems
- 13Disaster Preparedness Guidelines-locate infrastructure in safe location
-identify mission-critical systems
-identify resources needed to run those systems
-prepare remote backup facilities
-train and rehearse - 14Response to Security Incidents-org. must have plan
-centralized reporting of incidents
-speed is of essence
-preparation pays off
-practice incidence response
Informações
- Descrição
- O usuário eliminou as informações de disciplina FlashCards sobre CMIS 351 Lesson 12 Managing Information Security and Privacy, criado por Usuário eliminado em 31-03-2021.
- Criado por
- Usuário eliminado · mar 2021
- Atualizado
- 31 mar 2021
- Visualizações
- 3
- Histórico
-
- Criado por Adriana Vincelli-Joma · 12 jun 2020
- Copiado por Adriana Vincelli-Joma · 31 mar 2021
- Avaliação