What is the goal of information system security?

Define threat, vulnerability, safeguard, and target. Give an example of each. List three types of threats and five types of security losses. Give different examples for the three rows of figure. Summarize each of the elements in the cells of Figure. Explain why it is difficult to know the true cost of computer crime. Explain the goal of IS security.

Figure 1. Examples of Threat/Loss

Figure 2. Security Problems and Sources.

Transcribed Image Text:

Threat/Target Xbox Live gamer wants your credit card data Employee posts sensitive data to public Google+ group Vulnerability You use your credit card to buy online You send credit card data to friend in email Public access to not-secure group Safeguard Buy only using https None Passwords Procedures Employee training Result No loss Loss of credit card data Explanation Effective safeguard No safeguard Loss of Ineffective sensitive data safeguard Loss Unauthorized data disclosure Incorrect data modification Faulty service Human Error Procedural mistakes Loss of Infrastructure Procedural mistakes Incorrect procedures Ineffective accounting controls System errors Procedural mistakes Development and installation errors Denial of service Accidents (DOS) Accidents Threat Computer Crime Pretexting Phishing Spoofing Sniffing Hacking Hacking Usurpation DOS attacks Theft Terrorist activity Natural Disasters Disclosure during recovery Incorrect data recovery Service improperly restored Service interruption Property loss Threat/Target Xbox Live gamer wants your credit card data Employee posts sensitive data to public Google+ group Vulnerability You use your credit card to buy online You send credit card data to friend in email Public access to not-secure group Safeguard Buy only using https None Passwords Procedures Employee training Result No loss Loss of credit card data Explanation Effective safeguard No safeguard Loss of Ineffective sensitive data safeguard Loss Unauthorized data disclosure Incorrect data modification Faulty service Human Error Procedural mistakes Loss of Infrastructure Procedural mistakes Incorrect procedures Ineffective accounting controls System errors Procedural mistakes Development and installation errors Denial of service Accidents (DOS) Accidents Threat Computer Crime Pretexting Phishing Spoofing Sniffing Hacking Hacking Usurpation DOS attacks Theft Terrorist activity Natural Disasters Disclosure during recovery Incorrect data recovery Service improperly restored Service interruption Property loss

Answer rating: 100% (QA)

Information System Security Threat A threat is when a company or individual attempts to gather or manipulate the data of another company without that ... View the full answer