1.What is access control and is it enough to security an entity? (Please provide a detail...
1.What is access control and is it enough to security an entity? (Please provide a detail response)
2.What are the attributes of an efficient access control system?
3.Relating to physical security explain some of the reasons an entity might want to establish restricted areas?
4.Enforcement is a vital component of an efficient access control system; list and describe at least three (3) procedures you would recommend for maintaining the integrity of a card or badge system.
Homework Answers
There are two kind of access control one is physical and other one is logical.
In physical access control, there is a limitation on entering in the building. Access to the enterprise building is allowed to peoples who work there. They have passkey to enter the building.
In logical access control, There is a limitation on who will access computers, network of the enterprise. Every person have different level of accessibility for security purposes.
No, it is not enough, There are many other ways through which an attacker can breach like Through weak firewall of the system, fewer security measures in the network.
Add Answer to:
1.What is access control and is it enough to security an entity?
(Please provide a detail...
Physical Security we will survey the security issues identified with the offices, that is, the framework...
Physical Security we will survey the security issues identified with the offices, that is, the framework and utilities we requirement for our business, and how we can continue giving them at the same quality with no interference. It's implied that you ought to begin with an all around outlined occurrence reaction, calamity recuperation, and business congruity arrangement. In the event that you review the discourses from the security arranging module (part 4), excess is the catchphrase in all answers for...
TRUE/FALSE QUESTIONS: Foundations of Information Security and Assurance 1. There is a problem anticipating and testing for...
TRUE/FALSE QUESTIONS: Foundations of Information Security and Assurance 1. There is a problem anticipating and testing for all potential types of non-standard inputs that might be exploited by an attacker to subvert a program. 2. Without suitable synchronization of accesses it is possible that values may be corrupted, or changes lost, due to over-lapping access, use, and replacement of shared values. 3. The biggest change of the nature in Windows XP SP2 was to change all anonymous remote procedure call (RPC)...
The discussion: 150 -200 words. Auditing We know that computer security audits are important in business....
The discussion: 150 -200 words. Auditing We know that computer security audits are important in business. However, let’s think about the types of audits that need to be performed and the frequency of these audits. Create a timeline that occurs during the fiscal year of audits that should occur and “who” should conduct the audits? Are they internal individuals, system administrators, internal accountants, external accountants, or others? Let me start you: (my timeline is wrong but you should use some...
Question 3 Understanding and Assessing Control Risks (Total 20
Question 3 Understanding and Assessing Control Risks (Total 20 marks) Assessing Control Risks Quality Furniture NZ Ltd revealed the following through the enquiries and observations associated with understanding internal controls. The managing director Michael Jones has always placed a premium on the values of integrity and ethics. For years, business has been conducted on a handshake, and commitments made by the company were always honoured. Integrity and ethics are also valued in employees, and this quality has been evidenced in...
Which of the following actions did the Treadway Commission recommend to reduce fraudulent financial reporting? a. Establ...
Which of the following actions did the Treadway Commission recommend to reduce fraudulent financial reporting? a. Establish financial incentives that promote integrity in the financial reporting process. b. Identify and understand the factors that lead to fraudulent financial reporting. c. Assess the risk of corruption and misappropriation of assets within the company. d. Design and implement internal controls to provide reasonable assurance of preventing fraudulent financial reporting. Which of the following statements is (are) TRUE? a. Perpetrators who do not...
Which of the following matters would an auditor most likely consider to be a significant deficiency to be communicated to the audit committee
1. Which of the following matters would an auditor most likely consider to be a significant deficiency to be communicated to the audit committee? A. Management's failure to renegotiate unfavorable long-term purchase commitments.B. Recurring operating losses that may indicate going concern problems.C. Evidence of a lack of objectivity by those responsible for accounting decisions.D. Management's current plans to reduce its ownership equity in the entity. 2. After obtaining an understanding of internal control and arriving at a preliminary assessed level...
DQ1. What is an Audit Work Program (some call it Audit Program)? The audit work program...
DQ1. What is an Audit Work Program (some call it Audit Program)?
The audit work program - Email Surveillance Audit Program – What is
the structure and contents including various audit steps. Find 1-2
steps in the audit program where the audit software can be used.
How can audit software be used to gather evidence?.
(the Audit program (Email Surveillance Audit Program
details is attached).
DQ3. Review the contents of the Audit Manual of Office of
University Audits at University...
A new version of the operating system is being planned for installation into your department’s production...
A new version of the operating system is being planned for installation into your department’s production environment. What sort of testing would you recommend is done before your department goes live with the new version? Identify each type of testing and describe what is tested. Explain the rationale for performing each type of testing. [ your answer goes here ] Would the amount of testing and types of testing to be done be different if you were installing a security...
Please help to answer these questions HIPAA Assessment 1. When you comply with HIPAA standards, what...
Please help to answer these questions HIPAA Assessment 1. When you comply with HIPAA standards, what are you ensuring? a. Patients have unlimited access and control over their health information. b. Patients have legal rights regarding who can access and use their PHI. c. Our organization has implemented the proper security controls required by law. d. Our organization has the final say on who can access our patients and/or customers’ PHI. 2. You attempt to log in to an unattended...
Risk management in Information Security today Everyday information security professionals are bombarded with marketing messages around...
Risk management in Information Security today Everyday information security professionals are bombarded with marketing messages around risk and threat management, fostering an environment in which objectives seem clear: manage risk, manage threat, stop attacks, identify attackers. These objectives aren't wrong, but they are fundamentally misleading.In this session we'll examine the state of the information security industry in order to understand how the current climate fails to address the true needs of the business. We'll use those lessons as a foundation...
DQ1. What is an Audit Work Program (some call it Audit Program)?
The audit work program - Email Surveillance Audit Program – What is
the structure and contents including various audit steps. Find 1-2
steps in the audit program where the audit software can be used.
How can audit software be used to gather evidence?.
(the Audit program (Email Surveillance Audit Program
details is attached).
DQ3. Review the contents of the Audit Manual of Office of
University Audits at University...
Most questions answered within 3 hours.
-
Where is the error in this code sequence?
String s1 = "Hello";
String s2 = "ello";...
asked 10 months ago -
Financial data for Joel de Paris, Inc., for last year
follow:
Joel de Paris, Inc.
Balance...
asked 10 months ago -
Consider this reaction:
Al2(SO4)3 (aq)+ BaCl3
(aq) Al2Cl6 (aq)- +
3BaSO4(s) . What is the...
asked 10 months ago -
Suppose that Savneet is considering increasing her
recent random sample from 20 car rentals to 40...
asked 10 months ago -
Trucks arrive at an unloading terminal at an average rate of 120
per hour.
Trucks arrive...
asked 10 months ago -
Why are methanol and ethanol completely soluble in water while
octanol is not very little soluble....
asked 10 months ago -
A facilities manager at a university reads in a research report
that the mean amount of...
asked 10 months ago -
When the CuSO4 is rehydrated by adding water to the anhydrous
compound, is this an endothermic...
asked 10 months ago -
A ray of sunlight is passing from diamond into crown glass; the
angle of incidence is...
asked 10 months ago -
A block of mass 0.249 kg is placed on top of a light, vertical
spring of...
asked 10 months ago -
how do the kidneys compensate in the presences of acidosis
a) trigger hyperventilate
b) reserve acid...
asked 10 months ago -
Question 501 pts
The rental rate of capital to the firm increases. Which of the
following...
asked 10 months ago