421_c1

  

Length: 1-2 pages (excluding the title page and reference pages) and double-spaced

Consider

   

  an automated teller machine (ATM) in which users provide a personal      identification number (PIN) and a card for account access. Give examples      of confidentiality, integrity, and availability requirements associated      with the system and, in each case, indicate the degree of importance of      the requirement.

1. a desktop publishing system used to produce documents for various      organizations.

1. Give       an example of a type of publication for which confidentiality of the       stored data is the most important requirement.
2. Give       an example of a type of publication in which data integrity is the most       important requirement.
3. Give       an example in which system availability is the most important       requirement.

1. For      each of the following assets, assign a low, moderate, or high impact level      for the loss of confidentiality, availability, and integrity,      respectively. Justify your answers.

1. An       organization managing public information on its Web server.
2. A       law enforcement organization managing extremely sensitive investigative       information.
3. A       financial organization managing routine administrative information (not       privacy-related information).
4. An       information system used for large acquisitions in a contracting       organization contains both sensitive, pre-solicitation phase contract       information and routine administrative information. Assess the impact for       the two data sets separately and the information system as a whole.
5. A       power plant contains a SCADA (supervisory control and data acquisition)       system controlling the distribution of electric power for a large       military installation. The SCADA system contains both real-time sensor       data and routine administrative information. Assess the impact for the       two data sets separately and the information system as a whole.

   

Length: 1-2 pages (excluding the title page and reference pages) and double-spaced

1.

Consider an automated teller machine (ATM) in which users provide a personal identification number (PIN) and a card for account access. Give examples of confidentiality, integrity, and availability requirements associated with the system and, in each case, indicate the degree of importance of the requirement.

2. Consider a desktop publishing system used to produce documents for various organizations.

a. Give an example of a type of publication for which confidentiality of the stored data is the most important requirement.

b. Give an example of a type of publication in which data integrity is the most important requirement.

c. Give an example in which system availability is the most important requirement.

3. For each of the following assets, assign a low, moderate, or high impact level for the loss of confidentiality, availability, and integrity, respectively. Justify your answers.

a. An organization managing public information on its Web server.

b. A law enforcement organization managing extremely sensitive investigative information.

c. A financial organization managing routine administrative information (not privacy-related information).

d. An information system used for large acquisitions in a contracting organization contains both sensitive, pre-solicitation phase contract information and routine administrative information. Assess the impact for the two data sets separately and the information system as a whole.

e. A power plant contains a SCADA (supervisory control and data acquisition) system controlling the distribution of electric power for a large military installation. The SCADA system contains both real-time sensor data and routine administrative information. Assess the impact for the two data sets separately and the information system as a whole.