Securing and Protecting Information Systems

Week 3.   Discussion      

                                              Securing and Protecting Information Systems

CMGT/400

1. Write a 100- to 200-word short-answer response for the following:

   Supporting Activity: Effective Controls of Health Care Information

What are three controls that would be effective in protecting health care information?

For each item, describe the risk in your own terms and how the controls address that risk. Also, discuss how applicable the same risks and controls are to other organizations.

               2     Write a 100- to 200-word short-answer response for the following:

Supporting Activity: Vulnerabilities in virtualization and in the Cloud

How can a company protect data on corporate laptops? Many companies now store their data in the cloud.  Do you think that laptops working with virtualization and the cloud are in more danger than using a workstation?  Explain why you think so.

              3   Write a 100- to 200-word short-answer response for the following:

Supporting Activity: Value Ranking of Information

How would you rank the value of information today? Present and defend a convincing justification and challenge a classmate’s view.

                     4    Write a 100- to 200-word short-answer response for the following:

Supporting Activity: Disaster Recovery

How would you create a plan for disaster recovery?

What are the factors you would have to take into consideration when setting up your plan?  For each factor, describe what you would do to ensure that the data is safe.

Running Case: Stratified Custom Manufacturing

             5  Write 100- to 200-word short-answer response to the following:

What U.S. federal laws apply to this situation?

               6   Write 100- to 200-word short-answer response to the following:  

     What is one of the primary problems found during the implementation planning for        the e-discovery project? 

                  7   Write 100- to 200-word short-answer response to the following:

    How does a corporation handle situations like the above where policy non-enforcement or selective enforcement becomes a larger

              8  Write 100- to 200-word short-answer response to the following:

The information systems involved were administrative and operational and had little to no sensitive information on them. How does one go about protecting data at a level that is commensurate with its sensitivity, value, and criticality when those parameters can change due to circumstances such as a lawsuit?

APA format requires a concluding paragraph which sums up the wholepaper.

Format your paper consistent with APA guidelines.