Deck 15: HRIS Privacy and Security

Question 1

______ are best described as people who accesses a computer or computer network unlawfully.

A) Hackers
B) Viruses, worms, and trojans
C) Information thieves
D) Disgruntled employees

Answer 1

A

Question 2

Which of these is NOT a well-known "worm" threat?

A) Slammer
B) Code Red
C) MyDoom
D) MyPirate

Answer 2

D

Question 3

Which of the following is NOT considered a software threat to security?

A) worms
B) spyware
C) trojan virus
D) file corruption

Answer 3

D

Question 4

Human error and natural disasters are not considered viable threats to employee privacy and data security.

Question 5

Which of the following is NOT considered a threat to security?

A) human error
B) disgruntled employees and ex-employees
C) other "internal" attackers
D) none of these

Question 6

Integrity ensures that information is created and modified in an authorized manner.

Question 7

Which type of security threat is the most widespread,affecting almost 90% of companies?

A) computer fraud
B) phishing
C) denial of service
D) theft of hardware components, such as storage cards

Question 8

According to the text,approximately what percentage of employers monitor what employees are posting to external blogs and social networking sites?

A) 25%
B) 30%
C) 75%
D) 100%

Question 9

Which of the following is NOT a recommended privacy policy statement?

A) Adopt a comprehensive information security and privacy policy.
B) Store sensitive personal data in secure HRIS, and provide appropriate encryption.
C) Dispose of documents properly, or restore persistent storage equipment.
D) Conduct focus groups with selected employees.

Question 10

Which is NOT a symptom of spyware on an employee's computer?

A) invasion of privacy
B) appropriation of personal information
C) interference with the speed and responsiveness of the computer
D) proliferation of pop-up ads

Question 11

A hacker is defined as someone who accesses a computer or computer network unlawfully.

Question 12

Which state has passed a law protecting employee records in private organizations?

A) California
B) Ohio
C) New York
D) Oregon

Question 13

Phishing is known as the illegal scheme where victims usually receive e-mail messages that appear to come from an authentic source with which the victim does business.

Question 14

The McCumber Cube for Data Privacy has three dimensions.Which of the following is NOT a dimension that is used to organize a privacy policy?

A) desired information goals
B) countermeasures
C) state of information
D) use of information

Question 15

Which of the following is not considered a "best practice" that HR managers should consider to secure information security and privacy?

A) Train users on how to securely use and handle the equipment, data, and software.
B) Make backup copies of data files and programs.
C) Do not allow passwords to be shared. Change passwords frequently.
D) Require employees to take sensitive material home with them so that it is not left at the office.

Question 16

Information security breaches cost approximately ______ annually.

A) $78 million
B) $45 billion
C) $10 billion
D) $100 billion

Question 17

Which of the following is considered a common security threat?

A) human error
B) damage by employees
C) hackers
D) all of these

Question 18

Three main goals of information security are to achieve confidentiality,integrity,and availability within an HRIS.

Question 19

All companies have been affected by computer-based fraud,such as data processing or data entry routines that are modified.

Question 20

Viruses and trojans are common external security threats to organizations and often come in e-mail attachments.

Question 21

What is meant by information security in HRIS?

Question 22

Briefly list and describe the important goals and considerations of information security.

Question 23

What is the difference between a computer virus and spyware?

Question 24

What are some of the best practices that HR managers should consider to secure information security and privacy? Be sure to list at least five best practices that were discussed in class,as well as in your textbook.

Question 25

What is meant by phishing?

Question 26

Describe cyberterrorism and how to at least control its impact.

Question 27

Describe the McCumber Cube approach to privacy.

Question 28

There are many threats to information security.Please describe five information security threats.