7 - Developing & securing information systems ( H9&10&Balsamiq) Flashcards
Prototype if:
it provides 1) part of the functionality of system and 2) enables testing of a deisgn
Decision making proces
Recognizing Identifying alernatives valuing alternatives apply evaluate
Recognize
Follows problem analysis and a definition of the problem. Gain a complete understanding
Types of argument
Faith
Fear
Fact
Stakeholder
Management
IT Department
Users
Developers
Identify alternatives
Customized software
Off-the-shelf software
Outsourcing
When problems with IS staff:
- External acquisition of preackaged system
2. outsourcing systems development
project management traingle
Time
Resources
Scope
securing against threats to IS security must goals:
Availability
Inegrity
Confidentiality
Accountablility
Triad of information security
Intergrity
Availability
Confidentiality
Options for addressing risk
Risk Reduction
Risk Acceptance
Risk Transference
Risk Avoidance