oe 6
School of Computer & Information Sciences ITS-631 Operational Excellence Chapter 6 – Information Systems for Business and Beyond (2019)
Learning Objectives
identify the information security triad;
identify and understand the high-level concepts surrounding information security tools; and
secure yourself digitally.
Information Security Triad and Tools for Information Security
Information Security Triad:
Confidentiality
Integrity
Availability
Tools for Information Security
Authentication
Access Control
Read: Sidebar Password security
Encryption
Blockchain and Bitcoin
Speed of adoption
Governance
Smart Contracts
Bitcoin
Payment system that uses cryptocurrency
Backups
Full understanding of the organization's information resources
Regular backups of all data
Offsite storage of backup data sets
Test of data restoration
UPS (uninterruptible Power Supply)
Alternate or “hot” sites
Firewalls and Intrusion Detection Systems
Used to increase security on an organizational network
Intrusion Detection Systems
Placed on the network to determine if a network is being attacked.
Physical Security and Policies
Physical Security
Locked doors
Physical intrusion detection
Secured equipment
Environment monitoring
Employee training
Security policies
Administrative control
Usability and Personal Information Security
Usability
Balance the need for security and being able to access and use the resources
Personal Information Security
Keep software up to date
Install antivirus software and keep up to date
Be smart about your connections
Backup data
Secure accounts with two-factor authentication
Password management
Be suspicious of strange links and attachments
References
Bourgeous, D., Smith, J., Wang. S., Mortati, J. (2019). Information Systems for Business and Beyond. Retrieved from https://opentextbook.site/informationsystems2019/.