Intro To Information Assurance and Security

Risky Situaons CMGT/400 Version 2 1 Risky Situations Stephen D, James CMGT/400 Lee Dordal November 19, 2012 Risky Situaons CMGT/400 Version 2 2 University of Phoenix Material Risky Situaons Idenfy three types of sensive informaon involved with each situaon. Then, describe three ways in which each informaon item could be misused or harmed. For each of these, note at least one likely ﬁnding that you would include in a risk analysis report of the organizaon. Finally, answer the quesons at the end. Situation 1 – Online Banking System Information Affected Potential Harm (Risk) Likely Finding in Risk Analysis Report Financial Exposure of vital bank income and expense info Very High Access to Bank investments Medium Access to Bank business dealings Medium Customer Personal information leaked High Account information leaked Very High Credit rating exposed to risk Very High Risky Situaons CMGT/400 Version 2 3 Employee Vital hire data Medium Private employee information(address, social security number, etc.,) High Payroll information accessed Very High Situation 2 – Facebook Page (Personal) Information Affected Potential Harm (Risk) Likely Finding in Risk Analysis Report Personal Real Name Medium Address Medium Phone Number Medium Account Passwords Very High Personal information Very High Credit Card information Very High Family and Friends Names Medium Risky Situaons CMGT/400 Version 2 4 Affiliations Medium Addresses and phone numbers Medium Risky Situaons CMGT/400 Version 2 5 Situation 3 – Picture Phones in the Workplace Information Affected Potential Harm (Risk) Likely Finding in Risk Analysis Report Business Passwords Very High Profits Very High Location of/ types of physical security Very High Financial Payroll Very High Pay Rates per jobs Very High Location of safes, etc., Very High Employee Where they work High Who they are High What they do High Risky Situaons CMGT/400 Version 2 6 Situation 4 – E-Commerce Shopping Site Information Affected Potential Harm (Risk) Likely Finding in Risk Analysis Report Website Coding access Very High Accounts High Employee Medium Customer Credit Card info Very High Address Medium Names Low Financial Profits Medium Banking Info Very High Passwords Very High Risky Situaons CMGT/400 Version 2 7 Situation 5 – Real-World Application (such as CRM, ERP, other internal or external organizational systems – pick one and specify) Information Affected Potential Harm (Risk) Likely Finding in Risk Analysis Report (Medical Organization Intranet) Business Profits Medium Affiliations Medium Losses Medium Patient Names Very High Medications Very High Afflictions Very High Employee Names High Addresses High Payroll info High

All courses in CMGT

Popular Documents