Question 1

According to your textbook, one ethical issue that can arise from cybersecurity practices is related to the principle of "respondeat superior" which holds employers liable for the misconduct of their employees that occurs within the scope of their employment. However, because employees carry mobile devices that connect 24/7 to the work network, when does that liability begin and end?

Accepted Answer

The question is regarding an ethical issue related to the principle of "respondeat superior" which holds employers liable for the misconduct of their employees that occurs within the scope of their employment. With mobile devices connecting the employee to the work network 24/7, it becomes difficult to determine when the liability begins and ends.

Question 2

When conducting a risk management analysis, each of the following factors is used to calculate expected loss: 1) probability of an attack, 2) probability of attack being successful and 3) estimated loss that will occur if attack is successful.

Accepted Answer

These factors are commonly used in risk management analysis to calculate expected loss.

Question 3

The increasing practice of people bringing and using their own mobile devices in the workplace is called ______________.

Accepted Answer

The answer of The increasing practice of people bringing and...

Question 4

The fact that many smart phones and other personal mobile devices do not have anti-malware or encryption apps can create ________________ problems for organizations.

Accepted Answer

The answer of The fact that many smart phones and...

Question 5

Organizations are subject to national and international regulations and standards that specify how data can or cannot be collected and stored, as well as how it must be made available in the event of ____________________.

Accepted Answer

The answer of Organizations are subject to national and international...

Question 6

Controls placed on employee-owned devices can infringe on ____________. For instance, organizations could know what sites were visited or movies were watched, what was done on sick days, what texts were sent/received, and all social media activities during work hours and off-hours.

Accepted Answer

The answer of Controls placed on employee-owned devices can infringe...

Question 7

Forrester Research, Inc. estimates that a majority of companies had begun allowing employees to use their own ________________ for some aspects of their work by 2012.

Accepted Answer

The answer of Forrester Research, Inc. estimates that a majority...

Question 8

For many organizations, ____________ technologies have worsened their exposure to security risks because they cannot enforce or verify their ___________ providers' cybersecurity policies. Same word in both spaces)

Accepted Answer

The answer of For many organizations, ____________ technologies have worsened...

Question 9

According to your textbook, one ethical issue that can arise from cybersecurity practices is privacy - sometimes ethical or legal regulations require employers to monitor network users in ways that some people feel violates their privacy.

Accepted Answer

Privacy is a major ethical issue in cybersecurity, as employers and organizations need to strike a balance between ensuring the security of their systems and respecting the privacy of their users. Employees may feel that their privacy rights are being violated if their online activities are monitored without their knowledge or consent. This issue becomes more complex when ethical or legal regulations require organizations to monitor network users in certain ways, as this can create conflicts between privacy rights and security needs.

Question 10

Information system audits provide an additional layer of controls or safeguards. It is considered a deterrent to criminal actions, especially for insiders.

Accepted Answer

Information system audits can help prevent and detect fraudulent activities by providing additional layers of controls and ensuring that proper safeguards are in place. This can deter both insiders and outsiders from attempting to commit criminal actions or misuse information.

Question 11

One way that hackers and corporate spies trick people into revealing login information or access codes is ________________; using a story that convinces someone that it is okay to reveal secret information.

Accepted Answer

The answer of One way that hackers and corporate spies...

Question 12

When conducting a risk management analysis, each of the following factors is used to calculate expected loss: 1) probability of an attack, 2) probability of attack being successful and 3) probability of an attack remaining undetected.

Accepted Answer

Risk management analysis typically calculates expected loss using the probability of an attack and the potential impact or loss if the attack is successful. The probability of an attack being successful is considered, but the probability of an attack remaining undetected is not a standard factor in calculating expected loss.

Question 13

One shortcoming of an information system audit is that it focuses is on an organization's security strategies. It typically does not review specific tactics or actions an organization takes to maintain network security.

Accepted Answer

This statement is incorrect. An information system audit does not only focus on security strategies, but it also reviews specific tactics and actions an organization takes to maintain network security.

Question 14

To reduce the threat of security breaches related to employee owned devices, data and ISs need to be protected from __________________, including when an employee's device is lost or stolen, or an employee leaves the company.

Accepted Answer

The answer of To reduce the threat of security breaches...

Question 15

A stealth network attack in which an unauthorized person gains access to a network and remains undetected for a long time is referred to as an) ______________________ attack.

Accepted Answer

The answer of A stealth network attack in which an...

Question 16

According to your textbook, one ethical issue that can arise from cybersecurity practices is related to the principles fairness and equal opportunity. Are lower income employees with cheaper mobile devices able to compete effectively with employees who have more expensive devices? What obligations does the employer have to correct this inequity?

Accepted Answer

The answer of According to your textbook, one ethical issue...

Question 17

__________________ tactics are used by hackers and corporate spies to trick people into revealing login information or access codes.

Accepted Answer

The answer of __________________ tactics are used by hackers and...

Question 18

Cost savings associated with allowing employees to use their own mobile devices can be wiped out by increased _____________-mostly for IT personnel who struggle to maintain control over new and existing mobile devices.

Accepted Answer

The answer of Cost savings associated with allowing employees to...

Question 19

_______________________ is defined as "systems and assets, whether physical or virtual, so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters."

Accepted Answer

The answer of _______________________ is defined as "systems and assets,...

Question 20

One way that hackers and corporate spies trick people into revealing login information or access codes is____________; use of an incentive to get a user to perform an insecure action. A common application of this practice involves offering a free app or video for clicking a link in a text message and voting for best video game. Clicking the link downloads malware.

Accepted Answer