1. What are the six focuses of information security today?

The six main focuses of information security today are data, networks, procedures, people, hardware, and software. This is what anyone in the field of information security needs to know to be able to adequately protect the system and its information.

2. What are the differences between “viruses”, “worms”, and “Trojan horses” as examples of malicious software?

A virus is malicious code which will lower or stop system performances. A worm on the other hand is a special type of virus that spread through the memory to avoid detection and will consume the computers resources. a Trojan horse is any type of malicious software that uses a trigger to activate, such as opening a certain program or reaching a certain date.

3. Explain the different with regard to power “irregularities” and the impact that each may have on the ability for a business to function with its information systems.

the first type of power irregularities are called spikes or surges. these are sudden increases in voltage through power lines. Most systems are protected from these surges quite easily with the use of surge protectors making surges not a big threat. Another form of power irregulation is sags or brownouts. A brownout or sag is a drop in voltage in an electrical power supply. Brownouts can cause poor performance of equipment or even incorrect operation. the last power irregulation is called blackouts, or fault. Blackouts, like brownouts, are a drop in voltage of an electrical power supply but unlike brownouts which are quick a blackout could last days. Any company could be in trouble if there information systems ever went down for days at a time.

4. What are the “forces of nature” which could cause interruption in information processing for a business?

The forces of nature which could cause interuption of information processing are earthquakes, fires, floods, hurricanes, lightning, landslide, tornado, tsunami, electrical discharge, and even dust.

5. Give three examples of potential attacks against a business for which a business must protect itself?

One threat a business must protect itself against is trespassing or unauthorized access of the information system. this can be prevented by making secure passwords that change every so often. Another threat business have to deal with is vandalism. Business must make sure disgruntled employees don't try to smash computers or hard drives with valuable information on them. This also relates to the third threat of theft. Businesses do not want employees stealing valuable information from the company.

6. What has been the primary use of “computer fraud and abuse act” of 1986?

The Computer Fraud and Abuse Act of 1986 made it illegal to use computers to commit fraud by using technology to misrepresent one's identity. It is most commonly used to prosecute cases of identity theft and credit card theft.

7. What has been the impact of the HIPPA act of 1996 on individuals?

The Health Insurance Probability Act of 1996 required hospitals and doctors to share and allow access to authorized medical information. This act was tested by granting access to medical information about a spouse who had contracted AIDs to their unknowing significant other.

8. What has been the impact on business of the Sarbanes-Oxley Act of 1999?
Who was the act designed to protect?

The Sarbanes-Oxley Act of 1999 was established to apply to the Enron case for use of computers to provide false information to investors. This act protects investors so they do not unknowingly invest in bad or failing companies.

9. What is the role of “risk assessment” in determining the amount of money a business should spend to protect itself from security threats?

Management will use risk assessment to consider the probability of each risk occuring and the likely extent of the damage should it occur. They will then determine how much money they are willing to spend to avoid the high priority risks.

10. What is the difference between “benchmarking”, audits, and best practices in the security industry?

Benchmarking is the process of looking at what other trusted organizations are doing to reduce and control risk and then following them. Annual audits are used to measure the progress of the plan and to make sure no risk changes have occurred.