4# Marks

Learning Outcome(s):

Know how to manage information security policies

Chapter 4

Question One

 

There are two approaches to information security policies: the parallel approach and the integrated approach.

Explain each of them.

Which one is more efficient? Explain your response.

6# Marks

Learning Outcome(s):

Recognize the stages of the employee lifecycle

Chapter 6

Question Two

 

Describe each of the six stages of the employee life cycle using your own words.

4# Marks

Learning Outcome(s):

Identity and understand the Information Assets and information system

Chapter 5

Question Three

 

Define and provide examples for the following using your own words:

Information assets

Information system

6# Marks

Learning Outcome(s):

Understand information classification and level of classification

Chapter 5

Question Four

 

Based on what the Federal Information Processing Standard 199 (FIPS-199) requires information owners to classify information and information systems? Provide a detailed answer.

Are there any differences between classifying governmental information and commercial information? And are there any common levels of classification have been used to classify governmental information and commercial information? Explain your answers and supported them with examples (NOT from the book or slides).

Can a company make a change on classified information? Assuming now a company feels that such information need higher protection or the company decide to make some information that was classified as secret to be accessed by public. Here, is there any mechanism or process that allows a change in classified information. Explain your answers and supported them with examples (NOT from the book or slides).

 

College of Computing and Informatics IT Security and Policies
IT409 Assignment 2
Deadline: Day 02/04/2017 @ 23:59
[Total Mark for this Assignment is 20]
Student Details:
Name: ### ID: ### CRN: ###
Instructions:
This Assignment must be submitted on Blackboard via the allocated folder.
Email submission will not be accepted.
You are advised to make your work clear and well-presented, marks may be reduced for poor presentation.
You MUST show all your work.
Late submission will result in ZERO marks being awarded.
Identical copy from students or other resources will result in ZERO marks for all involved students.
Convert this Assignment to PDF just before submission. Pg. 1
Learning
Outcome(s):
Know how to
manage
information
security policies Question FourQuestion Four Question One 4# Marks There are two approaches to information security policies: the parallel
approach and the integrated approach.
a) Explain each of them. Chapter 4
b) Which one is more efficient? Explain your response. Pg. 2
Learning
Outcome(s):
Recognize the
stages of the
employee
lifecycle
Chapter 6 Question Two Question FourQuestion Four
6# Marks Describe each of the six stages of the employee life cycle using your own
words. Pg. 3
Learning
Outcome(s):
Identity and
understand the
Information
Assets and Question Three Question FourQuestion Four
4# Marks Define and provide examples for the following using your own words:
a) Information assets information
system
b) Information system Pg. 4
Learning
Outcome(s):
Understand
information
classification
and level of Question Four Question FourQuestion Four
6# Marks a) Based on what the Federal Information Processing Standard 199 (FIPS199) requires information owners to classify information and information
systems? Provide a detailed answer. classification
Chapter 5 b) Are there any differences between classifying governmental information
and commercial information? And are there any common levels of
classification have been used to classify governmental information and
commercial information? Explain your answers and supported them with
examples (NOT from the book or slides). c) Can a company make a change on classified information? Assuming
now a company feels that such information need higher protection or the
company decide to make some information that was classified as secret
to be accessed by public. Here, is there any mechanism or process that
allows a change in classified information. Explain your answers and
supported them with examples (NOT from the book or slides).

Attachments:

• 1493257369-Assignment 2 IT 409 SUCURITY.docx