a. What is an organizational system?

10a.) Security must be considered at the level of ________.

a. Information systems

b. Organizational systems

c. Both A and B

d. Neither A nor B

b. Why is it necessary to train employees in security relevant to their jobs?

c. Distinguish between procedures and processes.

10c.) Compared to ________, ________ are more structured.

a. Procedures; processes

b. Processes; procedures

c. Both A and B

d. Neither A nor B

d. Which are harder to secure? Why?

e. Explain why the separation of duties may be necessary and how it is done.

10e.) In movie theaters, one person sells tickets and another collects them. This prevents ________.

a. A single person from stealing on his or her own

b. Collusion

c. The crossing of security domains

e. All of the above

f. How does establishing a clear organizational structure and roles tend to lead to better security?

10f.) If a person knows his or her role in an organizational system ________.

a. They are dangerous

b. They are likely to report security violations

c. They are likely to act appropriately in unexpected circumstances

d. All of the above

g. Which is hardest to create—good security policies, priorities, or culture?

10g.) It is hardest to create good security ________.

a. Policies

b. Procedures

c. Processes

d. Culture

h. Why is security culture important?

i. What is the value of communication in good security?

j. Why is active management necessary for good organization system security?

10j.) If the security principles in this chapter are implemented in organizational systems, an organizational system is likely to work securely without substantial active management.

a. True

b. False