ipl-logo

Understand The Importance Of The Three Main Areas Of Accountability

642 Words3 Pages

It is essential that non-technical managers fully understand the importance of the three main areas of accountability, with regards to their company’s information security. Gelbstein (2013, p.27) points out that one of the difficulties with this is that a company’s management is usually in different organizational structures, and do not always get to talk to one another. The three main areas of accountability that I will discuss further are data related, systems related, and people related. Each area is an important element needed to defend companies’ data against unauthorized access, disclosure, use, deletion, etc. It used to be easier for management to keep paper data locked away in a room, with only select employees having access to it. However, with technology advancement, came the added strain of needing to secure anything stored on a computer hooked up to the Internet, or with cloud storage. Accountability helps with identifying any operations that individuals or systems have carried out, and guarantees the operations will be traced.

Data Related Area …show more content…

As much as it sounds ideal to prevent all employees from accessing all data, it is unrealistic because (especially in large organizations) assigning individual access rights would be too time-consuming and difficult. Also, claiming complete transparency is not a very sound idea, as there is plenty of data that should be kept private, and not made for public eyes. An example of keeping data classified would be a Geico insurance agent stationed at one location, accessing data at another Geico location; there is simply no reason why they should be able to access more peoples’ data than that of their own clients; governance should be in place to be sure that integrity is always assured and the right permissions are used, which aptly leads me onto the next area to

Show More
Related
149 Words | 1 Pages

The security controls, policies, procedures, and guidelines were tested using the security testing plan that was evaluated by a security team to correct and report flaws in the system design. The only major flaw doesn’t relate to the network or the physical system itself, but instead policies and procedures seem to be at the highest risk. Policies and procedures explain that the chain of custody during media transportation and disposal should be logged and tracked impeccably. I believe putting stronger controls in place for the transportation of media would lower the risk of exposed confidentiality tremendously. I believe each device used to transport should be trackable at any given time, rather than just by logs.

Read More
513 Words | 3 Pages

Every page, folder, template, group and user record has an audit trail that captures every change made, with the date/time and user stamp to indicate who made the change and when. Users with appropriate security access can view this information, and reporting is also available to pinpoint specific types of changes or to narrow down records to specific time frames. 6. How does the system ensure availability, security and privacy of data on shared

Read More
223 Words | 1 Pages

The Information Security Manager reports in their capacity to the CEO. Company officers, executives, directors, employees, contractors and third party service providers cooperate and work with the Information Security Manager to ensure the protection of customer’s non-public information and Licensee’s Information Assets. Policies, such as Enterprise Antivirus Program, Network Access, Software Development Security Standards, Physical Security, Vendor Manangmenet Ativirus, Mobile Computing/Remote Access, Inromation Security Risk Assessment, Social Media, Data Loss Prevention, and Secuiryt Incident Response Policies have been implemented to protect customer’s non-public personal information and company Information

Read More
1424 Words | 6 Pages

The level of access within Tesda will depend on the role they have within the company and the tasks they have to complete on a daily basis. If the management were to have any issues, it will be the job of the IT Department to give advice on the topic and then once a decision has been made, they can implement the access for the

Read More
453 Words | 2 Pages

Setting file permissions will ensure that only those employees who are supposed to see the private information, will be the only ones to see it. File permissions need to be set by department. For example, employees in marketing does not need to see files from anyone

Read More
1080 Words | 5 Pages

Task 1A Information Storage Procedures Management Data Employee information Employee information will be stored inside a laboratory office or in HR. the non-confidential information will be stored in paper files, the confidential information will be kept in either paper files in a locked filing cabinet, or on a computer file secured with a password. This information will be updated as required due to any new required information or any changes to the existing information stored in these files. We must keep this information as there may be medical records or allergies which we need to access Work schedules The laboratory work schedules are kept in the staffroom, in the main office or possibly could be available online.

Read More
522 Words | 3 Pages

Since the passage of No Child Left Behind Act 12 years ago, teachers are judged based on standardized tests and their students’ scores. The tests are often used as a measure for schools to determine if teachers should keep their jobs. The whole teaching profession is being shamed as inadequate. Joe Nocera, opinion columnist for the New York Times newspaper, by examining a thinker named Marc Tucker, argues for a new way to approach educational reform. To begin with, Nocera addresses reforming and reconstructing our current schools.

Read More
512 Words | 3 Pages

Over time, “computer and information technology (IT) for gathering, storing, manipulating, and communicating data are revolutionizing the use and spread of information” (Lynch, 1994, para. 1), in which IT is making the world that has become more open, “ubiquitous in the lives of people across the global” (Sullings, 2014, para. 1). Along the way, every advancement in information technology (IT) is accompanied by ethical issues (Mehrotra, 2012, p. 419). The fundamental ethic issues in IT are the privacy, property, accuracy, and use of individuals’ personal sensitive information. The Fair Credit Reporting Act of 1970 (FCRA); and the Financial Services Modernization Act of 1999 (FSMA), which also known as Gramm-Leach-Bliley Act of 1999 (GLBA) are two examples of important pieces of legislation regarding the financial industry and privacy. These two legislations have been created as a direct response to consumer privacy and security protections in the advancements of IT that resulted in new ethical issues.

Read More
983 Words | 4 Pages

Accountability Is something that is very important and leader and superiors in the Military or in any job for that reason, for the simple fact that it is not only a requirement for you but also very important to your supervisors or chain of command depending on your situation. You can resort to accountability for many reason when it comes to daily productivity as a team or group. Maintaining accountability of anything wether it be equipment or people can be very helpful when it comes to dividing tasks and assignments or just keeping track of everybody or everything you are in charge of. Punctuality is also very important and plays a very big part in accountability, for example, a soldier is late to formation and doesn’t inform his supervisor, this can lead to his supervisor not being able to provide accurate numbers to his/her

Read More
137 Words | 1 Pages

Accountability arose in the 1990s and had a dual focus enhancing institutional autonomy and performance (Clark, 1983). The emergence of the new accountability had both historical and theoretical bases. For instance, higher education scholars have long argued that higher education institutions will enhance institutional performance if they are autonomous (e.g., Carnegie Foundation for the Advancement of Teaching 1982; Clark 1983; Himanen et al. 2009; Volkwein 1987).

Read More
913 Words | 4 Pages

For operational purposes, the company collects and stores confidential information about their customers, employees, suppliers, and vendors. For purposes of their rewards program, the company collects sensitive and confidential consumer information. Although security measures and information technology systems have been put in place to ensure secure transmission and storage of confidential information, security breaches, computer viruses, or even human error can occur. Any of these events could cause data to be lost or stolen, as well as disclosed and used with malicious intent. Such occurrence could lead to litigation, fines, increased security costs, and damage to

Read More
907 Words | 4 Pages

Introduction Data is one of the most important sources of an organization. A relevant framework such as information security system is an integral part of the business processes of each organization. Information Security Management demonstrates itself as one of the key functions to ensure the security of an organization and the ability to operate organizational goals, not just IT resources. As businesses are facing various complexities, weaknesses and uncertain risks from a wide variety of violence. It depends on how this circumstance is dealt with, it can turn into a risk or chance to dissolve or improve business esteem.

Read More
1012 Words | 5 Pages

Accountability In The Army What is accountability ?. Accountability is the obligation that an individual or an organization has to be answerable, take responsibility for its actions, and provide an account in a transparent manner. Achievement of this character trait in an organization requires every individual in an organization to own up to his or her responsibilities, their actions and the results after that. Accountability is crucial due to various reasons. Accountability can make someone trustworthy it can provide responsibility it can encourage ownership it can.

Read More
155 Words | 1 Pages

Although organizations and professionals may follow all conceived protocols to prevent a breach, a system is never protected completely. It may consist of varying degrees of vulnerabilities. Therefore, organizations must ascertain what

Read More
386 Words | 2 Pages

A company’s database can be attacked from outside using so many methods hence information protection should take precedent in all decision making. Companies should take pride in making sure its database is protected from external breaches at all costs, otherwise the cost of tracking a breach is more expensive. Firstly, hacker are examples of a company been breached from outside, a hacker is a computer programmer who can at any given time combine his/her intelligence, curiosity, knowledge, creativity and smartness to do something as stupid as hacking for the fun of it or for ransom. Hackers meet their objectives by passing or interfering with the company’s computer’s security, software or database.

Read More

More about Understand The Importance Of The Three Main Areas Of Accountability

Related Topics

Open Document