IT HW 1
Stallion90
istm_6251_module_4-n-new_1.pptxISTM 6251
Module 4
ISTM 6251 Summer 2016 GWU Module 4/6
Ethics, Privacy and Security
Risk management and security, mitigation, internal and external threats
ISTM 6251 Summer 2016 GWU Module 4/6
2
Learning Objectives
To assess organizational approaches to security and privacy
To evaluate security related roles and tasks
To appreciate some of the “opportunities” recent technological developments offer
To assess threats posed by mobile devices
ISTM 6251 Summer 2016 GWU Module 4/6
Agenda
Security tasks and responsibilities
Password issues
Management responsibilities
Ethics and moral distance
IT encouragements
Mobile threats
The wrap-up
ISTM 6251 Summer 2016 GWU Module 4/6
Safeguards
Procedures
Data
Software
Hardware
People
Human
Data
Technical
Identification
Authorisation
Encryption
Firewalls
Malware Protection
Application Design
Rights
Responsibilities
Passwords
Encryption
Backup and recovery
Physical security
Hiring
Training
Education
Procedure design
Administration
Assessment
Compliance
Accountability
Leadership
What can you do ????
ISTM 6251 Summer 2016 GWU Module 4/6
Password issues
Requirement to change
Complexity
Multiple sites
Forgetfulness
Stored somewhere
ISTM 6251 Summer 2016 GWU Module 4/6
Management responsibilities
Security Elements
Match the mission
Part of management
Cost effective
Explicit responsibilities
Understand implications
Comprehensive
Assessed periodically
Social factors
Security Policy
Security program
Goals
Assets
Responsibility for program
Specific issues
eg personal use
Systems issues
eg use of data
Risk assessment
Assets, threats, safeguards, vulnerability, likelihood, consequences, loss
ISTM 6251 Summer 2016 GWU Module 4/6
Human aspects
Define positions
Hiring and screening
Dissemination and enforcement of rules
Termination policies
Temporary personnel
Administration
Account, passwords and help desk
ISTM 6251 Summer 2016 GWU Module 4/6
ISTM 6251 Summer 2016 GWU Module 4/6
Moral Distance
Speed and technology
Anonymity
Safety and distance
Jurisdiction
Global reach
Challenge
Steal without stealing
ISTM 6251 Summer 2016 GWU Module 4/6
IT “encouragements”
Digitisation
Global reach
Cameras and recording technology
Global influences
Internet designed to transmit and share freely
Expect to fail
ISTM 6251 Summer 2016 GWU Module 4/6
The take away…
The technology and the data gives us lots of opportunities
There is a lot of data meaning we need ways to deal with it
This can be expensive, time consuming and problematic
Technology developments promise further disruption
Continual conflict between acting ethically and competitive advantage
We have lots of opportunities to act unethically
ISTM 6251 Summer 2016 GWU Module 4/6
