W9 Business Intelligence and Business analytics

Question 1

Explain what is
 Ethic and
 the components of ethics

Answer 1

The principles of right and wrong
Based on 
	Their behaviour 
	Morals
Components: 
	Responsibilities: accepting consequence
	Accountability, 
	Liability

Question 2

Explain what is
 Responsible Computing/ Ethical Dilemmas and
 what is the manager’s role

Answer 2

Using unethical IS strategy to attain a competitive advantage.
STEPS
1) assess ethical view
2) overrides business view with ethical view
3) implement

Question 3

Discuss the difference between Ethics and law

Answer 3

Ethics: Principle of right versus wrong
Based on 
	Their behaviour 
	Morals
Law: Rules set by court/ legislature 
Based on laws

Question 4

Explain the different ethical views

Answer 4

Utilitarian approach: > Good or < Harm
Right Approach: >Protect rights/morals
Fairness Approach: treat all humans equal
Common good approach: respect and compassion for all others

Question 5

Identify all the different steps in the Ethical decision framework

Answer 5

1) Recognise an ethical issue
2) Get the facts
3) Evaluate alternative actions
4) Make a Decisions and Test It
5) Act and Reflect on the Outcome of Decisions

Question 6

Define what is
 privacy and
 information privacy

Answer 6

Privacy: 
	right to be alone, 
	individual control their privacy
Definition of information privacy: 
	Right to collect and 
	To what extent

Question 7

Identify and define the 4 different ethical issues

Answer 7

Privacy Issue: collecting, storing and analysing of individuals
 Choice (desired level),
 Consent,
 Control (over settings)
Accuracy Issue:
 Accuracy,
 Deal with inaccuracy
Property Issue: Ownership of information
 how data is collected, stored, used, shared
Accessibility Issue: Who has access to the information and how much
 Access, protection,
 avoid harm who attain data

Question 8

Identify different privacy issues and related issue with
 Electronic Surveillance and
 Web2.0 and privacy

Answer 8

Electronic surveillance.
 Data->Advantage
Web 2.0 and privacy:
 misuse of information to harm others

Question 9

Define Privacy policies and codes

Answer 9

Guidelines to protect privacy of others
Data collection: 
	Legitimate purpose, 
	not in excess, 
	consent 
Data Accuracy: 
	verified, current, 
	disagreement = disclose
Data confidentiality: 
	no authorised, 
	no 3rd party, 
	data is maintained

Question 10

Explain what is the manager role when dealing with privacy issues

Answer 10

Implement controls highlighted be PAPA
Implement best practices
	Culture of moral responsibility
	Process Governance (identify security risk)
	Avoid decoupling 
Deter thieves
Respect customer privacy

Question 11

Define what is
 IS security and
 IS security management

Answer 11

IS Security: risk of crime activity, hazards, damage/loss
IS Security Management: Process and policies
 Identifying the threats: The different dangers
 Identifying the exposure: the damage done
 Identifying the vulnerability: % of harm from a threat

Question 12

Identify the 5 Trending factor result in increasing vulnerability

Answer 12

Interconnected business environment
Accessible computing (computer now are easy to steal)
Ease of hacking: hack can be downloaded
International crime: Cybercrime
Lack of management support: Employees are not following security procedures

Question 13

Identify different
 external and
 internal threats

Answer 13

External:
 Internet attacks,
 natural/
 man made disasters
Internal:
 Employees (misuse of power/info, duplication, human error)
 System/software (failure, info leak, unauthorised software)
 Hardware: Unauthorised access, software/physical attacks

Question 14

Identify different Intentional attacks

Answer 14

PHYSICAL THEFT or ATTACK
	Espionage or trespass, Identify Theft
	Theft of equipment or information
	Information extortion
SOFTWARE
	Software attack malicious software, 
	Alien software (adware, spyware, spamware, cookies and track cookies)
	Cyberterrorism and cyber warfare
OTHER
	Sabotage or vandalism, 
	Supervisory Control and Data Acquisition Attacks (SCADA)

Question 15

Identify
 different unintentional attacks and
 different threats

Answer 15

Human errors: Laziness
THREATS: 
	Senior, 
	HR, 
	IS
Social engineering: Tricking
	THREATS: 
	Impersonations, 
	tailgating, 
	shoulder surfing
lack of security controls: Lack of updates

Question 16

Explain what is
 risk management and
Discuss why we make trade off

Answer 16

ensuring the IS security is cost – effective
1) Assess the value of the assets
2) Estimate the % of compromise
3) Does Cost of Protecting < Value of the asset
It is difficult to create a prefect security
 Too many locations
 security is inconvenient
 prevention is expensive
 Security is difficult to justify using cost-benefit

Question 17

Explain the different risk migration strategies

Answer 17

Risk acceptance: No control, absorb loss
Risk Limitation: Control, minimise loss
Risk transference: No control, insurance

Question 18

Explain what is a
 physical control and
 provide examples

Answer 18

Purpose: Preventing unauthorised access from physical access
 Walls, gates, guards
 Limiting the number of computers available
 Limiting the number of allowed attempts

Question 19

Explain what is a
 Access control and
 provide examples

Answer 19

Purpose: Prevent unauthorised individual from using information resources
 Authentication: identity the person with access
Biometrics, ID, tokens, voice recognitions, passwords
 Authorisation: Privilege/ access level of an employee
Determine what action are allowed

Question 20

Explain what is a
 Communication control and
 provide examples

Answer 20

Securing the movement of data across networks
SOFTWARE PROTECTION
 Firewall: Protect against untrusted networks
 Anti-malware/anti- virus:
MONITORING
 Whitelisting and blacklisting
 Employee monitor systems: scrutinise employee use of a computers
ENCRYPTION
 Encryption: Prevent ear dropping
 Virtual Private Network: Flexibility and Encryption
 Transport layer security: Encryption (HTTPS)

Question 21

Identify what is involved in
 Business continuity plan
 Information system auditing

Answer 21

Business continuity plan: Having a disaster recovery plan
Information system auditing: Ensuring the IS function properly
 Working as expected
 Effectiveness of IS
 Security: Consider potential risk and controls
Performed by internal and reviewed by external

Question 22

Identify Question asked in regards to privacy issues with Personal Information in databases

Answer 22

DATA INTEGRITY - COLLECTED
	Are the record accurate?
	Can the record be changed?
	How long to make a change?
DATABASE WAREHOUSE - STORED
	Where are the records located?
	How secure is the data?
BUSINESS - USED
	How is the data used?
	Is the data sold or give?
OTHER - SHARED?
	How to release the personal records?