Chapter 15: Computer Security and Privacy
|
|
|
- Fay Pitts
- 8 years ago
- Views:
Transcription
1 Understanding Computers Today and Tomorrow 12 th Edition Chapter 15: Computer Security and Privacy
2 Learning Objectives Explain why all computer users should be concerned about computer security. List some risks associated with hardware loss, damage, and system failure, and understand ways to safeguard a PC against these risks. Define software piracy and digital counterfeiting and explain how they may be prevented. Explain what information privacy is and why computer users should be concerned about it. Chapter 15 Understanding Computers, 12th Edition 2
3 Learning Objectives Describe some privacy concerns regarding databases, electronic profiling, spam, and telemarketing, and identify ways individuals can protect their privacy. Discuss several types of electronic surveillance and monitoring and list ways individuals can protect their privacy. Discuss the status of security and privacy legislation. Chapter 15 Understanding Computers, 12th Edition 3
4 This chapter covers: Overview Why computer security is important Security concerns related to hardware loss and damage and precautions that can be taken A discussion of software piracy and digital counterfeiting and steps to reduce the occurrence of them Why information privacy is important Possible risks for personal privacy violations and precautions to safeguard one s privacy Discussion of legislation related to computer security and privacy Chapter 15 Understanding Computers, 12th Edition 4
5 Why Be Concerned About Computer Security? There are a number of security concerns related to computers that users should be aware of, including: Having a PC stolen Losing important data Losing contact lists Pirated or counterfeited products Chapter 15 Understanding Computers, 12th Edition 5
6 Hardware Loss, Damage, and System Failure Hardware loss: Can occur when a portable PC, USB flash drive, mobile device, or other piece of hardware is stolen or lost by the owner Hardware theft: One of the most obvious types of hardware loss Occurs when hardware is stolen from an individual or an organization Hardware can be stolen from homes, businesses, cars, airports, hotels, etc. Often for the value of the hardware, but increasingly for the information that might be contained on the hardware C level attacks are growing Chapter 15 Understanding Computers, 12th Edition 6
7 Hardware Loss, Damage, and System Failure Hardware damage: Can be accidental or intentional System failure: The complete malfunction of a computer system Can be due to a hardware problem, software problem, or computer virus Can be due to a natural disaster or planned attack Chapter 15 Understanding Computers, 12th Edition 7
8 Protecting Against Hardware Loss, Damage, and System Failure Use door and computer equipment locks Cable locks Security slots Chapter 15 Understanding Computers, 12th Edition 8
9 Protecting Against Hardware Loss, Damage, and System Failure Use encryption to protect data Increasingly used with USB flash drives, notebook PCs, hard drives, etc. Full disk encryption (FDE): Everything on storage medium is encrypted Self-encrypting hard drive: A hard drive using FDE Chapter 15 Understanding Computers, 12th Edition 9
10 Protecting Against Hardware Loss, Damage, and System Failure Computer tracking software: Used to find a PC after it is lost or stolen Sends out identifying data via the Internet Law enforcement can use this data to recover the PC Most often used with PCs but also available for other devices Kill switch: Software used to destroy sensitive data on a stolen or lost PC Other precautions: Alarm software, tamper evident labels, etc. Common sense Chapter 15 Understanding Computers, 12th Edition 10
11 Protecting Against Hardware Loss, Damage, and System Failure Chapter 15 Understanding Computers, 12th Edition 11
12 Protecting Against Hardware Loss, Damage, and System Failure Proper hardware care: Needed to prevent damage Ruggedized PCs: Designed for more abuse than conventional hardware Chapter 15 Understanding Computers, 12th Edition 12
13 Protecting Against Hardware Loss, Damage, and System Failure Surge suppressor: Protects hardware from damage due to electrical fluctuations Uninterruptible power supply (UPS): Provides continuous power to a computer system for a period of time after the power goes off Chapter 15 Understanding Computers, 12th Edition 13
14 Protecting Against Hardware Loss, Damage, and System Failure Also: Watch dust, moisture, static, heat, etc. Avoid head crash Stop USB devices before removing Use screen protectors, jewel cases, etc. Chapter 15 Understanding Computers, 12th Edition 14
15 Protecting Against Hardware Loss, Damage, and System Failure Backup and disaster recovery plans: Both businesses and individuals should use appropriate backup procedures Continuous data protection (CDP): Enables data backups to be made on a continual basis Backup media needs to be secured Data storage companies store backup media at secure remote locations Online backup is another possibility Disaster-recovery plan: Spells out what an organization will do to prepare for and recover from a disruptive event Hot sites Chapter 15 Understanding Computers, 12th Edition 15
16 Software Piracy and Digital Counterfeiting Software piracy: Unauthorized copying of a computer program Widespread, global problem Occurs when: Individuals make illegal copies of software to give to friends Businesses or individuals install software on more than the number of computers allowed according to the end-user license agreement (EULA) Sellers install unlicensed copies on PCs sold to consumers Large-scale operations in which programs and packaging are illegally duplicated and sold as supposedly legitimate products Chapter 15 Understanding Computers, 12th Edition 16
17 Software Piracy and Digital Counterfeiting Chapter 15 Understanding Computers, 12th Edition 17
18 Software Piracy and Digital Counterfeiting Digital counterfeiting: The use of computers to make illegal copies of currency, checks, collectibles, and other items Often scanned and printed or color-copied Chapter 15 Understanding Computers, 12th Edition 18
19 Protection Against Software Piracy and Digital Counterfeiting Protection against software piracy: Educating businesses and consumers Strengthening antipiracy laws Holograms: Printed text or images attached to a product that change their appearance when the product is tilted Mandatory product registration/activation Watching online auction sites/lawsuits Chapter 15 Understanding Computers, 12th Edition 19
20 Protection Against Software Piracy and Digital Counterfeiting Protecting against digital counterfeiting New currency designs Microprinting, watermarks, security thread, etc. Special paper is used with U.S. currency Identifying technology included in digital imaging hardware Digital watermarks: Subtle alteration to a digital item that is not noticeable but that can be retrieved to identify the owner of the item Also can use: Holograms, RFID tags, and other hard-toreproduce content Chapter 15 Understanding Computers, 12th Edition 20
21 Protection Against Software Piracy and Digital Counterfeiting Chapter 15 Understanding Computers, 12th Edition 21
22 Why Be Concerned About Information Privacy? Privacy: State of being concealed or free from unauthorized intrusion Information privacy: Rights of individuals and companies to control how information about them is collected and used Computers add additional privacy challenges Many data breaches recently due to lost or stolen hardware, carelessness with documents containing sensitive data, database breaches, etc. Businesses need to be concerned with the expense, damage to reputation, and possible lawsuits Web activity and privacy was discussed in Chapter 8; other privacy concerns are discussed next Chapter 15 Understanding Computers, 12th Edition 22
23 Databases, Electronic Profiling, Spam, and Other Marketing Activities Marketing database: Collection of data about people, used for marketing purposes Data obtained through online and offline purchases, public information, etc. Beginning to be used in conjunction with Web activities Government database: Collection of data about people, collected and maintained by the government Tax information, Social Security earnings, personal health records, marriage and divorce information Some information is confidential, other is public Chapter 15 Understanding Computers, 12th Edition 23
24 Databases, Electronic Profiling, Spam, and Other Marketing Activities Chapter 15 Understanding Computers, 12th Edition 24
25 Databases, Electronic Profiling, Spam, and Other Marketing Activities Electronic profiling Using electronic means to collect a variety of indepth information about an individual Chapter 15 Understanding Computers, 12th Edition 25
26 Databases, Electronic Profiling, Spam, and Other Marketing Activities Privacy policy: Discloses how information you provide will be used Included on many Web sites Chapter 15 Understanding Computers, 12th Edition 26
27 Spam and Other Marketing Activities Spam: Unsolicited, bulk sent over the Internet Often involves health-related products, fraudulent business opportunities, pornography, etc. Ads from companies a person has done business with are also considered to be spam by many Appearing via instant messaging (spim) Also delivered via mobile phones and fax machines Spam legislation enacted some regulations regarding spam Other annoyances Pop-up ads Pop-under ads Telemarketing Chapter 15 Understanding Computers, 12th Edition 27
28 Protecting the Privacy of Personal Information Safeguard your address Use a throw-away address (an extra address that you can use for activities that might result in spam) Get a second address from your ISP or from Hotmail, Yahoo! Mail, or Gmail Can stop using it and get a new one when needed Chapter 15 Understanding Computers, 12th Edition 28
29 Protecting the Privacy of Personal Information Be cautious of revealing personal information Read a Web site s privacy policy Can use privacy software, such as the free Privacy Bird program Do not supply personal information to people in chat rooms Chapter 15 Understanding Computers, 12th Edition 29
30 Protecting the Privacy of Personal Information Avoid putting too many personal details on your Web site Be wary of sites offering prizes in exchange for personal information Can use an anonymous Web browsing service, such as Anonymizer Supply only the required information in registration forms Delete your browsing history and settings when using a public computer Chapter 15 Understanding Computers, 12th Edition 30
31 Protecting the Privacy of Personal Information Chapter 15 Understanding Computers, 12th Edition 31
32 Protecting the Privacy of Personal Information Use an filter to automatically route possible spam into a special folder to deal with later Chapter 15 Understanding Computers, 12th Edition 32
33 Protecting the Privacy of Personal Information Can opt out from marketing activities Some privacy groups want individuals to have to opt in to activities instead Do Not Call Registry: Can reduce calls from telemarketers Do Not Registry: May be a possibility for the future, but more difficult to implement Web servers holding sensitive data should be secured Only enter personal information on Web sites using secure servers Automatic encryption systems for can help sensitive data from accidentally being revealed Chapter 15 Understanding Computers, 12th Edition 33
34 Protecting the Privacy of Personal Information Properly dispose of hardware and outdated data Wipe (not just delete) data on hard drives before disposing of a computer or hard drive Storage media containing sensitive data should be shredded Businesses should have a media sanitation/data destruction policy Chapter 15 Understanding Computers, 12th Edition 34
35 Electronic Surveillance and Monitoring Computer monitoring software: Used to record an individual s computer usage either by capturing images of the screen or by recording the actual keystrokes used Can be used in homes by adults to monitor computer usage of children or spouse Can be used in businesses to monitor employee computer usage Keystroke-logging programs: Used to capture keystrokes Can be used by hacker to capture usernames, passwords, and other sensitive information entered into a PC Used by the government in criminal investigations Chapter 15 Understanding Computers, 12th Edition 35
36 Computer Monitoring Software Chapter 15 Understanding Computers, 12th Edition 36
37 Electronic Surveillance and Monitoring Video surveillance: The use of video cameras to monitor activities of individuals Used to monitor employees Used in public locations for crime-prevention purposes Stores and other businesses Public streets Subways, airports, etc. Can be used with face recognition software Privacy issues also involved with the use of camera phones Chapter 15 Understanding Computers, 12th Edition 37
38 Video Surveillance Chapter 15 Understanding Computers, 12th Edition 38
39 Electronic Surveillance and Monitoring Employee monitoring: Observing or reviewing employees actions while they are on the job Can monitor computer usage Can monitor physical location Video cameras GPS capabilities built into cars or mobile phones Proximity cards Can also be used to access facility, computer, etc. Businesses should notify employees Chapter 15 Understanding Computers, 12th Edition 39
40 Electronic Surveillance and Monitoring Presence technology: Enables one computing device to locate and identify the current status of another device on the same network Instant messaging, mobile phones, etc. Can be used to locate coworkers or by customers May also be used for marketing activities in the future Chapter 15 Understanding Computers, 12th Edition 40
41 Protecting Personal and Workspace Privacy Can use antispyware software to detect if someone is monitoring your computer usage Employers have a responsibility to keep employee and customer information private and secured Employees should be familiar with their company s employee policy and avoid personal activities at work Chapter 15 Understanding Computers, 12th Edition 41
42 Computer Security and Privacy Legislation Difficult for legal system to keep pace with technology Difficult to balance freedom of speech with privacy Chapter 15 Understanding Computers, 12th Edition 42
43 Computer Security and Privacy Legislation Chapter 15 Understanding Computers, 12th Edition 43
44 Summary Why Be Concerned About Computer Security Hardware Loss, Damage, and System Failure Software Piracy and Digital Counterfeiting Why Be Concerned About Information Privacy Databases, Electronic Profiling, Spam, and Other Marketing Activities Electronic Surveillance and Monitoring Computer Security and Privacy Legislation Chapter 15 Understanding Computers, 12th Edition 44
OCT Training & Technology Solutions Training@qc.cuny.edu (718) 997-4875
OCT Training & Technology Solutions Training@qc.cuny.edu (718) 997-4875 Understanding Information Security Information Security Information security refers to safeguarding information from misuse and theft,
Chapter 11 Manage Computing Securely, Safely and Ethically. Discovering Computers 2012. Your Interactive Guide to the Digital World
Chapter 11 Manage Computing Securely, Safely and Ethically Discovering Computers 2012 Your Interactive Guide to the Digital World Objectives Overview Define the term, computer security risks, and briefly
10- Assume you open your credit card bill and see several large unauthorized charges unfortunately you may have been the victim of (identity theft)
1- A (firewall) is a computer program that permits a user on the internal network to access the internet but severely restricts transmissions from the outside 2- A (system failure) is the prolonged malfunction
Computers and Society: Security and Privacy
1 Chapter 12 Computers and Society: Security and Privacy 2 Chapter 12 Objectives 3 Computer Security: Risks and Safeguards What is a computer security risk? 4 Computer Security: Risks and Safeguards 1
Information Security
Information Security A staff guide to the University's Information Systems Security Policy Issued by the IT Security Group on behalf of the University. Information Systems Security Guidelines for Staff
Information Security Training 2012
Information Security Training 2012 Authored by: Gwinnett Medical Center Information Security Department Modified for affiliated schools students & instructors by: Linda Horst, RN, BSN, BC Objectives After
A Guide to Information Technology Security in Trinity College Dublin
A Guide to Information Technology Security in Trinity College Dublin Produced by The IT Security Officer & Training and Publications 2003 Web Address: www.tcd.ie/itsecurity Email: ITSecurity@tcd.ie 1 2
So the security measures you put in place should seek to ensure that:
Guidelines This guideline offers an overview of what the Data Protection Act requires in terms of information security and aims to help you decide how to manage the security of the personal data you hold.
Information Security Policy September 2009 Newman University IT Services. Information Security Policy
Contents 1. Statement 1.1 Introduction 1.2 Objectives 1.3 Scope and Policy Structure 1.4 Risk Assessment and Management 1.5 Responsibilities for Information Security 2. Compliance 3. HR Security 3.1 Terms
Privacy Data Loss. Privacy Data Loss. Identity Theft. The Legal Issues
Doing Business in Oregon Under the Oregon Consumer Identity Theft Protection Act and Related Privacy Risks Privacy Data Loss www.breachblog.com Presented by: Mike Porter March 10, 2009 2 Privacy Data Loss
Guide to INFORMATION SECURITY FOR THE HEALTH CARE SECTOR
Guide to INFORMATION SECURITY FOR THE HEALTH CARE SECTOR Information and Resources for Small Medical Offices Introduction The Personal Health Information Protection Act, 2004 (PHIPA) is Ontario s health-specific
Stable and Secure Network Infrastructure Benchmarks
Last updated: March 4, 2014 Stable and Secure Network Infrastructure Benchmarks 501 Commons has developed a list of key benchmarks for maintaining a stable and secure IT Infrastructure for conducting day-to-day
Chapter 12 Objectives. Chapter 12 Computers and Society: Security and Privacy
Chapter 12 Objectives Chapter 12 Computers and Society: and Privacy p. 12.2 Identify the various types of security risks that can threaten computers Recognize how a computer virus works and take the necessary
Countering and reducing ICT security risks 1. Physical and environmental risks
Countering and reducing ICT security risks 1. Physical and environmental risks 1. Physical and environmental risks Theft of equipment from staff areas and Theft of equipment from public areas Theft of
a) Access any information composed, created, received, downloaded, retrieved, stored, or sent using department computers.
CAYUGA COUNTY POLICY MANUAL Section 11 Subject: Electronic messaging and internet 1 Effective Date: 5/25/10; Res. 255-10 Supersedes Policy of: November 28, 2000 Name of Policy: County Computer Hardware-Software
Chapter 11 Computers and Society, Security, Privacy, and Ethics
Objectives Computers and Society, Security, Privacy, and Ethics Describe the the types of of computer security risks Identify ways to to safeguard against computer viruses, worms, and and Trojan horses
Guadalupe Regional Medical Center
Guadalupe Regional Medical Center Health Insurance Portability & Accountability Act (HIPAA) By Debby Hernandez, Compliance/HIPAA Officer HIPAA Privacy & Security Training Module 1 This module will address
The Ministry of Information & Communication Technology MICT
The Ministry of Information & Communication Technology MICT Document Reference: ISGSN2012-10-01-Ver 1.0 Published Date: March 2014 1 P a g e Table of Contents Table of Contents... 2 Definitions... 3 1.
BROADALBIN-PERTH CENTRAL SCHOOL ADOPTED 1/22/00 3 RD READING AND ADOPTION 5/21/12. Employee Computer Use Agreement. Terms and Conditions
BOARD OF EDUCATION POLICY ADMINISTRATIVE GUIDELINE 6.6.1A(3) BROADALBIN-PERTH CENTRAL SCHOOL ADOPTED 1/22/00 3 RD READING AND ADOPTION 5/21/12 Employee Computer Use Agreement The district is pleased to
BOARD OF DIRECTORS PAPER COVER SHEET. Meeting date: 22 February 2006. Title: Information Security Policy
BOARD OF DIRECTORS PAPER COVER SHEET Meeting date: 22 February 2006 Agenda item:7 Title: Purpose: The Trust Board to approve the updated Summary: The Trust is required to have and update each year a policy
Information Technology Acceptable Use Policies
White Paper: Information Technology Acceptable Use Policies A practical guide for protecting IT assets from the largest single IT Security threat inappropriate use of IT services, including desktops, email,
Professional Ethics for Computer Science
Professional Ethics for Computer Science Chapter 4: Privacy Jie Gao Computer Science Department Stony Brook University Privacy Issues Internet privacy consists of privacy over the media of the Internet:
INITIAL APPROVAL DATE INITIAL EFFECTIVE DATE
TITLE AND INFORMATION TECHNOLOGY RESOURCES DOCUMENT # 1107 APPROVAL LEVEL Alberta Health Services Executive Committee SPONSOR Legal & Privacy / Information Technology CATEGORY Information and Technology
LAMAR STATE COLLEGE - ORANGE INFORMATION RESOURCES SECURITY MANUAL. for INFORMATION RESOURCES
LAMAR STATE COLLEGE - ORANGE INFORMATION RESOURCES SECURITY MANUAL for INFORMATION RESOURCES Updated: June 2007 Information Resources Security Manual 1. Purpose of Security Manual 2. Audience 3. Acceptable
Town of Essex Comprehensive Public Records and Technology Policy
Town of Essex Comprehensive Public Records and Technology Policy Introduction: Public records and the use of technology are inextricably linked in our modern age. As such, this policy covers both topics,
TEMPLE UNIVERSITY POLICIES AND PROCEDURES MANUAL
TEMPLE UNIVERSITY POLICIES AND PROCEDURES MANUAL Title: Computer and Network Security Policy Policy Number: 04.72.12 Effective Date: November 4, 2003 Issuing Authority: Office of the Vice President for
National Cyber Security Month 2015: Daily Security Awareness Tips
National Cyber Security Month 2015: Daily Security Awareness Tips October 1 New Threats Are Constantly Being Developed. Protect Your Home Computer and Personal Devices by Automatically Installing OS Updates.
NETWORK SERVICES WITH SOME CREDIT UNIONS PROCESSING 800,000 TRANSACTIONS ANNUALLY AND MOVING OVER 500 MILLION, SYSTEM UPTIME IS CRITICAL.
NETWORK SERVICES WITH SOME CREDIT UNIONS PROCESSING 800,000 TRANSACTIONS ANNUALLY AND MOVING OVER 500 MILLION, SYSTEM UPTIME IS CRITICAL. Your Credit Union information is irreplaceable. Data loss can result
Data Protection Division Guidance Note Number 10/08
Gibraltar Regulatory Authority Data Protection Division Data Protection Division Data Protection Division Guidance Note Number 10/08 Monitoring of Staff Guidance Note Number 10/08 Issue Date: 06/11/2008
The data which you put into our systems is yours, and we believe it should stay that way. We think that means three key things.
Privacy and Security FAQ Privacy 1. Who owns the data that organizations put into Google Apps? 2. When can Google employees access my account? 3. Who can gain access to my Google Apps administrative account?
Session 46 Information Security Creating Awareness, Educating Staff, and Protecting Information
Session 46 Information Security Creating Awareness, Educating Staff, and Protecting Information Chris Aidan, CISSP Information Security Manager Pearson Topics Covered Data Privacy Spyware & Adware SPAM
Protecting your business from spam
Protecting your business from spam What is spam? Spam is the common term for electronic junk mail unwanted messages sent to a person s email account or mobile phone. Spam messages vary: some simply promote
Computer Security at Columbia College. Barak Zahavy April 2010
Computer Security at Columbia College Barak Zahavy April 2010 Outline 2 Computer Security: What and Why Identity Theft Costs Prevention Further considerations Approach Broad range of awareness Cover a
City of Venice Information Technology Usage Policy
City of Venice Information Technology Usage Policy The City of Venice considers information technology (IT) resources to be city resources. It shall be the policy of the city to maintain these resources
Management and Storage of Sensitive Information UH Information Security Team (InfoSec)
Management and Storage of Sensitive Information UH Information Security Team (InfoSec) Who Are We? UH Information Security Team Jodi Ito - Information Security Officer Deanna Pasternak & Taylor Summers
Major Risks and Recommended Solutions
Major Risks and Recommended Solutions www.icdsecurity.com OVERVIEW Are you familiar with the main security risks that threaten data centers? This paper provides an overview of the most common and major
BSHSI Security Awareness Training
BSHSI Security Awareness Training Originally developed by the Greater New York Hospital Association Edited by the BSHSI Education Team Modified by HSO Security 7/1/2008 1 What is Security? A requirement
HIPAA Security Training Manual
HIPAA Security Training Manual The final HIPAA Security Rule for Montrose Memorial Hospital went into effect in February 2005. The Security Rule includes 3 categories of compliance; Administrative Safeguards,
Pierce County Policy on Computer Use and Information Systems
Pierce County Policy on Computer Use and Information Systems Pierce County provides a variety of information technology resources such as computers, software, printers, scanners, copiers, electronic mail
InsightCloud. www.insightcloud.com. Hosted Desktop Service. What is InsightCloud? What is SaaS? What are the benefits of SaaS?
What is InsightCloud? InsightCloud is a web portal enabling Insight customers to purchase and provision a wide range of Cloud services in a straightforward and convenient manner. What is SaaS? Software
Guideline to Back Up Your Computer And Important Files
Guideline to Back Up Your Computer And Important Files What is backing up? To backup is to make spare copies of file and store them separately to the originals. Why should you do it? In the world of computers
Student & Staff Access and Use of Networked Information Resources and Communications
Page 1 of 6 These procedures are written to support the Electronic Resources Policy of the board of directors and to promote positive and effective digital citizenship among students and staff. Digital
HIPAA Security. assistance with implementation of the. security standards. This series aims to
HIPAA Security SERIES Security Topics 1. Security 101 for Covered Entities 2. Security Standards - Administrative Safeguards 3. Security Standards - Physical Safeguards 4. Security Standards - Technical
DSHS CA Security For Providers
DSHS CA Security For Providers Pablo F Matute DSHS Children's Information Security Officer 7/21/2015 1 Data Categories: An Overview All DSHS-owned data falls into one of four categories: Category 1 - Public
SAFEGUARDING PRIVACY IN A MOBILE WORKPLACE
SAFEGUARDING PRIVACY IN A MOBILE WORKPLACE Checklist for taking personally identifiable information (PII) out of the workplace: q Does your organization s policy permit the removal of PII from the office?
HIPAA Security Alert
Shipman & Goodwin LLP HIPAA Security Alert July 2008 EXECUTIVE GUIDANCE HIPAA SECURITY COMPLIANCE How would your organization s senior management respond to CMS or OIG inquiries about health information
When you listen to the news, you hear about many different forms of computer infection(s). The most common are:
Access to information and entertainment, credit and financial services, products from every corner of the world even to your work is greater than ever. Thanks to the Internet, you can conduct your banking,
Tenth Judicial Circuit of Florida Information Systems Acceptable Use Guidelines Polk, Hardee and Highlands Counties as of January 2014
Tenth Judicial Circuit of Florida Information Systems Acceptable Use s Polk, Hardee and Highlands Counties as of January 2014 The following guidelines define the acceptable use of information technology
ITSC Training Courses Student IT Competence Programme SIIS1 Information Security
ITSC Training Courses Student IT Competence Programme SI1 2012 2013 Prof. Chan Yuen Yan, Rosanna Department of Engineering The Chinese University of Hong Kong SI1-1 Course Outline What you should know
COMPUTER SECURITY FOR SMALL SCHOOLS BY PETER WALLACE. face in a small school is the need
One of the challenges teachers face in a small school is the need to spread themselves thinly over areas in which they have little experience or expertise. This is especially true when it comes to maintaining
Saint Martin s Catholic Academy
Saint Martin s Catholic Academy E-Safety Policy - Acceptable Use - Students January 2015 Why have an Acceptable Use Policy? An Acceptable Use Policy is about ensuring that you, as a student at Saint Martin
Supplier IT Security Guide
Revision Date: 28 November 2012 TABLE OF CONTENT 1. INTRODUCTION... 3 2. PURPOSE... 3 3. GENERAL ACCESS REQUIREMENTS... 3 4. SECURITY RULES FOR SUPPLIER WORKPLACES AT AN INFINEON LOCATION... 3 5. DATA
Network and Workstation Acceptable Use Policy
CONTENT: Introduction Purpose Policy / Procedure References INTRODUCTION Information Technology services including, staff, workstations, peripherals and network infrastructures are an integral part of
HIPAA Security. 2 Security Standards: Administrative Safeguards. Security Topics
HIPAA Security SERIES Security Topics 1. Security 101 for Covered Entities 5. 2. Security Standards - Organizational, Security Policies Standards & Procedures, - Administrative and Documentation Safeguards
Chapter 15: Computer and Network Security
Chapter 15: Computer and Network Security Complete CompTIA A+ Guide to PCs, 6e What is in a security policy Mobile device security methods and devices To perform operating system and data protection How
REMOTE BACKUP-WHY SO VITAL?
REMOTE BACKUP-WHY SO VITAL? Any time your company s data or applications become unavailable due to system failure or other disaster, this can quickly translate into lost revenue for your business. Remote
The Bishop s Stortford High School Internet Use and Data Security Policy
Internet Acceptance Use and Data Security Policy Last Updated: 08/10/2012 Date of Next Review: 08/10/2015 Approved by GB: 10/10/2012 Responsible Committee: Student Welfare and Development Internet Acceptable
Protect your personal data while engaging in IT related activities
Protect your personal data while engaging in IT related activities Personal Data (Privacy) Ordinance Six Data Protection Principles Principle 1 purpose and manner of collection of personal data Collection
NC DPH: Computer Security Basic Awareness Training
NC DPH: Computer Security Basic Awareness Training Introduction and Training Objective Our roles in the Division of Public Health (DPH) require us to utilize our computer resources in a manner that protects
Acceptable Usage Policy
Version 2.1 20141230 Acceptable Usage Policy Acceptable Usage Policy Contents 1. PURPOSE OF THIS POLICY... 2 2. GENERAL... 2 3. APPLICATION... 2 4. UNREASONABLE USE... 2 5. UNACCEPTABLE USE... 3 6. SPAM...
Responsible Access and Use of Information Technology Resources and Services Policy
Responsible Access and Use of Information Technology Resources and Services Policy Functional Area: Information Technology Services (IT Services) Applies To: All users and service providers of Armstrong
Introduction. General Use
Introduction Dane County provides a variety of technological resources to its employees to improve public service and maximize efficiency. The purpose of this policy is to advise users regarding the use
Faculty/Staff/Community Mountain Home School District Computer and Network Appropriate Use Policy
Faculty/Staff/Community Mountain Home School District Computer and Network Appropriate Use Policy Mountain Home School District is responsible for securing its network and computer systems against unauthorized
County Identity Theft Prevention Program
INTRODUCTION CHAPTER OSCEOLA COUNTY IDENTITY THEFT PREVENTION PROGRAM The Osceola County Board of County Commissioners is committed to protecting consumers who do business with Osceola County, and as such
INFORMATION TECHNOLOGY SECURITY POLICY COUNTY OF IMPERIAL
INFORMATION TECHNOLOGY SECURITY POLICY COUNTY OF IMPERIAL 1 INTRODUCTION The County of Imperial Information & Technical Services (ITS) Security Policy is the foundation of the County's electronic information
COB 302 Management Information System (Lesson 8)
COB 302 Management Information System (Lesson 8) Dr. Stanley Wong Macau University of Science and Technology Chapter 13 Security and Ethical Challenges 安 全 與 倫 理 挑 戰 Remarks: Some of the contents in this
Franciscan University of Steubenville Information Security Policy
Franciscan University of Steubenville Information Security Policy Scope This policy is intended for use by all personnel, contractors, and third parties assisting in the direct implementation, support,
HIPAA Security Series
7 Security Standards: Implementation for the Small Provider What is the Security Series? The security series of papers provides guidance from the Centers for Medicare & Medicaid Services (CMS) on the rule
Fighting spam in Australia. A consumer guide
Fighting spam in Australia A consumer guide Fighting spam Use filtering software Install anti-virus software Use a personal firewall Download security patches Choose long and random passwords Protect your
10 Things You Need to Know About Internet Security
INFORMATION SECURITY 10 Things You Need to Know About Internet Security Presented by: Steven Blanc IT Security Officer, Bowdoin College Internet Security Versus Internet Safety Security: We must secure
ensure prompt restart of critical applications and business activities in a timely manner following an emergency or disaster
Security Standards Symantec shall maintain administrative, technical, and physical safeguards for the Symantec Network designed to (i) protect the security and integrity of the Symantec Network, and (ii)
Service Monitoring Discrimination. Prohibited Uses and Activities Spamming Intellectual Property Violations 5
WIN reserves the right to prioritize traffic based on real time and non-real time applications during heavy congestion periods, based on generally accepted technical measures. WIN sets speed thresholds
VIRGINIA STATE UNIVERSITY RISK ANALYSIS SURVEY INFORMATION TECHNOLOGY
ASSESSABLE UNIT: ENTER THE NAME OF YOUR ASSESSABLE UNIT HERE BUSINESS PROCESS: ENTER YOUR BUSINESS PROCESS HERE BANNER INDEX CODE: ENTER YOUR BANNER INDEX CODE HERE Risk: If you monitor the activity and
Topics. What are privacy and security all about? How can I protect confidential information? What should I do if I see a problem?
Federal: Privacy And Security 1 Topics What are privacy and security all about? What s confidential here? How can I protect confidential information? What should I do if I see a problem? How can I get
Beaumont Public Library Computer Usage Policies
Beaumont Public Library Computer Usage Policies Information contained in this document is on internet safety, use guidelines, internet filtering, and wireless internet. The Beaumont Public Library, in
SAS TRUSTEE CORPORATION ( STC )
SAS TRUSTEE CORPORATION ( STC ) POLICY ON USE OF EMPLOYER COMMUNICATION DEVICES AND WORKPLACE SURVEILLANCE under the Workplace Surveillance Act 2005 File: B915 May 2011 Version 3 INDEX Policy Statement...
MAXIMUM PROTECTION, MINIMUM DOWNTIME
MANAGED SERVICES MAXIMUM PROTECTION, MINIMUM DOWNTIME Get peace of mind with proactive IT support Designed to protect your business, save you money and give you peace of mind, Talon Managed Services is
ICT SECURITY POLICY. Strategic Aim To continue to develop and ensure effective leadership, governance and management throughout the organisation
ICT SECURITY POLICY Strategic Aim To continue to develop and ensure effective leadership, governance and management throughout the organisation Responsibility Assistant Principal, Learner Services Jannette
Protecting Your Data On The Network, Cloud And Virtual Servers
Protecting Your Data On The Network, Cloud And Virtual Servers How SafeGuard Encryption can secure your files everywhere The workplace is never static. Developments include the widespread use of public
Tameside Metropolitan Borough Council ICT Security Policy for Schools. Adopted by:
Tameside Metropolitan Borough Council ICT Security Policy for Schools Adopted by: 1. Introduction 1.1. The purpose of the Policy is to protect the institution s information assets from all threats, whether
Spyware. Summary. Overview of Spyware. Who Is Spying?
Spyware US-CERT Summary This paper gives an overview of spyware and outlines some practices to defend against it. Spyware is becoming more widespread as online attackers and traditional criminals use it
IT Data Security Policy
IT Data Security Policy Contents 1. Purpose...2 2. Scope...2 3. Policy...2 Access to the University computer network... 3 Security of computer network... 3 Data backup... 3 Secure destruction of data...
The Department of Health and Human Services Privacy Awareness Training. Fiscal Year 2015
The Department of Health and Human Services Privacy Awareness Training Fiscal Year 2015 Course Objectives At the end of the course, you will be able to: Define privacy and explain its importance. Identify
Tele-Media Cable Internet Acceptable Use Policy
Tele-Media Cable Internet Acceptable Use Policy Important Note: Tele-Media may revise this Acceptable Use Policy (the "Policy") from time to time without notice by posting a new version of this document
APPROVED BY: Signatures on File Chief Information Officer APPROVED BY: Chief Financial Officer PURPOSE
TITLE: COMPUTER USE POLICY PAGE 1 OF 5 EFFECTIVE DATE: 07/2001 REVIEW DATES: 02/2003, 09/2006 REVISION DATES: 03/2005, 03/2008 DISTRIBUTION: All Departments PURPOSE APPROVED BY: Signatures on File Chief
HIPAA Compliance and the Protection of Patient Health Information
HIPAA Compliance and the Protection of Patient Health Information WHITE PAPER By Swift Systems Inc. April 2015 Swift Systems Inc. 7340 Executive Way, Ste M Frederick MD 21704 1 Contents HIPAA Compliance
DRAFT National Rural Water Association Identity Theft Program Model September 22, 2008
DRAFT National Rural Water Association Identity Theft Program Model September 22, 2008 This model has been designed to help water and wastewater utilities comply with the Federal Trade Commission s (FTC)
PROTECT YOUR COMPUTER AND YOUR PRIVACY!
PROTECT YOUR COMPUTER AND YOUR PRIVACY! Fraud comes in many shapes simple: the loss of both money protecting your computer and Take action and get peace of and sizes, but the outcome is and time. That
POLICY NO. 3.14 September 8, 2015 TITLE: INTERNET AND EMAIL USE POLICY
POLICY NO. 3.14 September 8, 2015 TITLE: INTERNET AND EMAIL USE POLICY POLICY STATEMENT: Many of our employees have access to the internet as well as email capabilities. The County recognizes that these
13. Acceptable Use Policy
To view the complete Information and Security Policies and Procedures, log into the Intranet through the IRSC.edu website. Click on the Institutional Technology (IT) Department link, then the Information
IIABSC 2015 - Spring Conference
IIABSC 2015 - Spring Conference Cyber Security With enough time, anyone can be hacked. There is no solution that will completely protect you from hackers. March 11, 2015 Chris Joye, Security + 1 2 Cyber
Cloud Computing. Chapter 10 Disaster Recovery and Business Continuity and the Cloud
Cloud Computing Chapter 10 Disaster Recovery and Business Continuity and the Cloud Learning Objectives Define and describe business continuity. Define and describe disaster recovery. Describe the benefits
Policies and Procedures For 1:1 Program Ogallala Public Schools
Policies and Procedures For 1:1 Program Ogallala Public Schools Ogallala Public Schools is proud to offer our Ogallala High School students Apple ipad devices for use at school and at home. The 1:1 ipad
NOS for IT User and Application Specialist. IT Security (ESKITU04) November 2014 V1.0
NOS for IT User and Application Specialist IT Security (ESKITU04) November 2014 V1.0 NOS Reference ESKITU040 ESKITU041 ESKITU042 Level 3 not defined Use digital systems NOS Title Set up and use security
Information Security Policy Manual
Information Security Policy Manual Latest Revision: May 16, 2012 1 Table of Contents Information Security Policy Manual... 3 Contact... 4 Enforcement... 4 Policies And Related Procedures... 5 1. ACCEPTABLE
Huddersfield New College Further Education Corporation
Huddersfield New College Further Education Corporation Card Payments Policy (including information security and refunds) 1.0 Policy Statement Huddersfield New College Finance Office handles sensitive cardholder
The second section of the HIPAA Security Rule is related to physical safeguards. Physical safeguards are physical measures, policies and procedures
The second section of the HIPAA Security Rule is related to physical safeguards. Physical safeguards are physical measures, policies and procedures to protect and secure a covered entity s electronic information
Is your data secure?
You re not as safe as you think Think for a moment: Where do you keep information about your congregants or donors? In an Excel file on someone s desktop computer? An Access database housed on your laptop?
TEKAMAH-HERMAN COMMUNITY SCHOOLS LEARNING INITIATIVE POLICY AND PROCEDURES 2014-2015
TEKAMAH-HERMAN COMMUNITY SCHOOLS LEARNING INITIATIVE POLICY AND PROCEDURES 2014-2015 Tekamah-Herman Community Schools is proud to offer our High School Students Apple MacBook Air computers for use at school