Define the security term “availability.” Provide an example of a business situation in which availability is more important than confidentiality.

4 Questions related to IT Security and Policies

Pls read carefully and answer them correctly.

Also, avoid plagiarism.

Requirements: NA

Question One

Define the security term “availability.” Provide an example of a business situation in which availability is more important than confidentiality.

Question Two

ISO 27002 Supplier Relationships (Section 15) was added in the 2013 version. Discuss your opinion with real example of why this section was added?

Question Three

Information Security Policies provide a framework that guides the organization and protects the assets of that organization. Consider the SEU privacy policy discussed in Question One, the policy goal is to ensure the privacy of sensitive information. This sensitive information may be vulnerable to some information security threats.

Choose at least one SEU information asset and identify the information sensitivity level based on SEU privacy policy (i.e., Low, or Middle, or Highly sensitive information).

List at least two security threats to the chosen sensitive information asset, two vulnerabilities that might allow a threat to occur, and two risks resulting from the threats and vulnerabilities.

Note: Write your answer in the table below.

Question Four

Discuss the importance of asset inventory in terms of security perspective.

Question Five

A smartphone is an information system. As with any information system, data ownership and custodianship must be assigned. If a company allows an employee to use a personally owned device for work-related communications:

a. Who would you consider the information system owner? Why?

b. Who would you consider the information system custodian? Why?

c. In regard to protecting data, should there be a distinction between company data and personal data?