oe 6

School of Computer & Information Sciences

ITS-631 Operational Excellence

Chapter 6 – Information Systems for and Beyond (2019)

Learning Objectives
identify the information security triad;
identify and understand the high-level concepts surrounding information security tools; and
secure yourself digitally.

Information Security Triad and Tools for Information Security
Information Security Triad:
Confidentiality
Integrity
Availability
Tools for Information Security
Authentication
Access Control
Read: Sidebar Password security

Encryption

Blockchain and Bitcoin
Speed of adoption
Governance
Smart Contracts
Bitcoin
Payment system that uses cryptocurrency

Backups
Full understanding of the organization’s information resources
Regular backups of all data
Offsite storage of backup data sets
Test of data restoration
UPS (uninterruptible Power Supply)
Alternate or “hot” sites

Firewalls and Intrusion Detection Systems
Used to increase security on an organizational network

Intrusion Detection Systems
Placed on the network to determine if a network is being attacked.

Physical Security and Policies
Physical Security
Locked doors
Physical intrusion detection
Secured equipment
Environment monitoring
Employee training
Security policies
Administrative control

Usability and Personal Information Security
Usability
Balance the need for security and being able to access and use the resources
Personal Information Security
Keep software up to date
Install antivirus software and keep up to date
Be smart about your connections
Backup data
Secure accounts with two-factor authentication
Password management
Be suspicious of strange links and attachments

References
Bourgeous, D., Smith, J., Wang. S., Mortati, J. (2019). Information Systems for and Beyond. Retrieved from https://opentextbook.site/informationsystems2019/.