ITM 350 Chapter 5: ITM 350 Chapter 5 Notes.docx

22 views3 pages

Document Summary

Every information system is subject to the risk of error, fraud, malicious acts, and disasters. Risk is the probability of an event occurring that leads to undesirable consequences. Error is an unintentional act or omission that leads to undesirable consequences. Fraud is an intentional act that relies on deception to steal assets or obtain other benefits. Malicious acts are intentional acts that lead to the destruction of facilities, hardware, software or data. Disasters are acts of nature such as floods, storms, tornados, earthquakes, fires, power failures, or other events that can lead to destruction of assets and disruption of business activities. Controls are preventatives, detective, and corrective measures that are designed to reduce the risk of error, fraud, malicious acts, or disasters to an acceptable level. General controls: are not unique to a particular application, and include several categories. Security management: policies and procedures that management adopt and implement to guide the security program of an enterprise.

Get access

Grade+20% off
$8 USD/m$10 USD/m
Billed $96 USD annually
Grade+
Homework Help
Study Guides
Textbook Solutions
Class Notes
Textbook Notes
Booster Class
40 Verified Answers
Class+
$8 USD/m
Billed $96 USD annually
Class+
Homework Help
Study Guides
Textbook Solutions
Class Notes
Textbook Notes
Booster Class
30 Verified Answers

Related Documents

Related Questions