Matt Moss
BUS 381
Chapter 7
7-26-13
1. (10 points) How is the security of a firm's information system and data affected by its people, organization, and technology? How can a firm's security policies contribute and relate to the six main business objectives? Give examples.
The security of a firm's information system and data by exposing it to threats such as people because employees may have access to data not shared on the internet. The organizations goals could also be a factor because hackers could target them for that reason alone. Technology may also be a factor, whether or not the organization uses the most recent tech or old outdated tech that hackers can easily access.
A Firms security policy can contribute to the 6 main business objective by supporting them. 2. (10 points) Why is software quality important to security? What specific steps can an organization take to ensure software quality? Hackers and their companion viruses are an increasing problem, especially on the Internet. What are the most important measurers for a firm to take to protect itself from this? Is full protection feasible? Why or why not?
If poor software is implemented in an information system, it could possible lead to all sorts of security vulnerabilities. An organization can ensure software quality by employing software metrics and rigorous software testing. The most important protection that a firm can use is Anti-virus and Firewalls. Full protection is not feasible because vulnerabilities are found daily by hackers.

3. (10 points) Read the case study (How Secure is Your Samrtphone?) on page 249. And answer the following questions: * It has been said that a smartphone is “a microcomputer in your hand.” Discuss the security implications of this statement. What people, organization, and technology factors must be addressed by smartphone security?
Only certain people