Linda Fernandez
Chap 2 Review Questions 1. Why is information security a management problem? What can management do that technology cannot?
Both management and IT management are responsible for the protection necessary to secure information. They are the ones who make the decisions regarding the appropriate security system and what level of security will work for the system.

2. Why is data the most important asset an organization possesses? What other assets in the organization require protection?
Data is important because it keeps a record of all changes and activity. Without data, the company or organization may fail because they have no records, and therefore be of no good use.

3. Which management groups are responsible for implementing information security to protect the organizations’ ability to function?
General Management and IT Management are responsible because it has to be set up for that specific system. If one part fails, then they are the ones to fix it and make it usable

4. Has the implementation of networking technology created more or less risk for businesses that use information technology? Why?
Networking has caused more risk for businesses using information technology because it made it much easier for attackers to breach the security systems. They are even more of a target with the internet connection. 5. What is information extortion? Describe how such an attack can cause losses, using an example not found in the text.
Information extortion is where information is taken and held for some type of ransom or demands.
An example would be, breaching a company’s credit card files from customers, and then saying they will be released everywhere if the company didn’t pay them something or subject to their demands.

6. Why do employees constitute one of the greatest threats to information security?
Employees