Chapter 4

Question 0

What are the six Epolicies?

Answer 0

1. Ethical Computer Use Policy
2. Information Privacy Policy
3. Acceptable Use Policy
4. Email Privacy Policy
5. Social Media Policy
6. Workplace Monitoring Policy

Question 1

What is information ethics?

Answer 1

govern the ethical and moral issues arising from the development and use of information technologies, as well as the creation, collection, duplication, distribution, and processing of information itself (with or without the aid of computer technologies).

Question 2

What is the ethical computer use policy?

Answer 2

• It contains general principles to guide computer use behavior.
• It ensures all users are informed of the rules and, by agreeing to use the system on that basis, consent to abide by the rules

Question 3

What is the information privacy policy?

Answer 3

• It contains general principles regarding information privacy.
• The unethical use of information typically occurs “unintentionally” when it is used for new purposes.

Question 4

What is the acceptable use policy?

Answer 4

It requires a user to agree to follow it to be provided access to corporate email, information systems, and the internet.

Question 5

What is nonrepudiation?

Answer 5

A contractual stipulation to ensure that Ebusiness participants do not deny their online actions.

Question 6

What is the email privacy policy?

Answer 6

Details the extent to which email messages may be read by others.

Question 7

What is spam?

Answer 7

Unsolicited email

Question 8

What is the anti-spam policy?

Answer 8

Simply states that email users will not send unsolicited emails (or spam)

Question 9

What is the social media policy?

Answer 9

Outlines the corporate guidelines or principles governing employee online communications.

Question 10

What is information technology monitoring?

Answer 10

Tracks people’s activities such measures as number of keystrokes, error rate, and number of transactions processed.

Question 11

What is the employee monitoring policy?

Answer 11

Explicitly state how, when, and where the company monitors its employees.

Question 12

What is the first line of defense?

Answer 12

People:
Information security policies: identify the rules required to maintain information security
Information security plan: details how an organization will implement the information security policies

Question 13

What is the second line of defense?

Answer 13

Technology

Question 14

What is phishing?

Answer 14

A technique to gain personal information for the purpose of identity theft, usually by means of fraudulent email.

Question 15

What is pharming?

Answer 15

Reroutes requests for legitimate websites to false websites.

Question 16

What are the three primary information technology security areas?

Answer 16

People: Authentication and Authorization
Data: Prevention and Resistance
Attacks: Detection and Responses

Question 17

What is encryption?

Answer 17

Scrambles information into an alternative form that requires a key or password to decrypt.