Compliance and accreditation infer the ability to provide security for everything. In preparing a rubric for emergency response, compliance, and accreditation, there are generally two schools of thought. risk based planning and vulnerability based planning. According to the CNSS, a “Vulnerability Assessment” is the systematic examination of an information system or product to determine the … Read more
As a forensic examiner, you must make sure that the evidence that you collect will stand up in court. What three things (categories) need to be verifiable in order for evidence to have a solid foundation to stand on? How are these categories measured and qualified? After you answer this portion of the discussion question, … Read more
One of the more troubling problems, and a significant challenge, is protecting children from accessing “obscene” material. Since the definition of obscenity is difficult to apply it further goes that it is difficult to prohibit children from viewing it. CIPA’s purpose is to protect minors from accessing offensive material (obscene material, child pornography, and anything … Read more
“How does creating a security policy ensure the protection of the organization? What controls need to be implemented in order for the security policy to be effective? When developing the security policy, who is responsible for conducting the risk analysis of the policy? At what point of the policy development lifecycle should the risk analysis … Read more
Precedent is invaluable to the U.S. Judicial System, because it lays a foundation. It sets a standard which every case that comes after it, is held to. Even if the precedent is overruled, the fact that there was a case to compare against, and use in reference can only result in a thorough … Read more
How could gaining access to a patients sensitive medical information cause a problem for the consumer financial sector? That is a very good question, and pardon my ignorance, but I’m not sure that there would be one. HIPAA was passed in 1996, before Obama outlawed insurance refusal for pre-existing medical conditions … Read more
Napster is a great example of the use of the intellectual property rights laws to protect an industry. As you answer this question consider the theft of U.S. intellectual property through the use of malware and hacking mechanisms from Chinese industry or government. Will our laws protect us from these types of threats? Have they … Read more
While at first I was opposed to the suggestion that small businesses should be required to adhere to the Sarbanes-Oxley Act, upon further consideration I would have to agree. Any increase in financial transparency will not only fall under “Good Governance” as you so eloquently put it, but is also a forced fail safe to … Read more
I believe that most forms of communication are malleable enough to fulfill a meaningful conveyance of any kind of message. An appropriately worded letter, or a well composed voicemail has the potential to express a heartfelt condolence or an uplifting compliment. However, I agree that face to face communication is easier to accurately transmit the … Read more
Efficiency and effectiveness are two very different traits, when used in description of a production cycle. Efficiency is the controlled use of resources and the prevention of unnecessary waste. In most references, resources refers to money, and is the most frequently used figure regarding the measuring of efficiency. Effectiveness, on the other hand, considers the … Read more