Chapter 21: Information Security and Counterintelligence

Computer security, information security, and information technology (IT) security all mean the same thing and are interchangeable terms.

• True

• False

Counterintelligence is an important function and can be applied in private sector companies as well as in government agencies.

• True

• False

Legal measures are generally “ reactive ” rather than “ proactive ” in nature.

• True

• False

According to consultant Michael Moberly, approximately what percentage of a company’s value generally lies in information and intangible assets?

• 90%

• 50%

• 10%

• 75%

The practice of asset protection focuses on which categories of “ assets ” ? (Circle all that apply.)

• Information

• Physical

• People

• Property

Which of the following is NOT a characteristic of the Economic Espionage Act of 1996?

• It makes it a federal crime to steal trade secrets

• It is a forward-looking piece of legislation

• It includes “ altering ” information as a prohibited act

• It must be updated every 5 years

According to this chapter, the field of “ information security ” includes:

• Competitive intelligence

• IT security

• Intellectual property protection

• Traditional information security

When an information loss is known or suspected, the following actions should be taken:

• Corrective actions

• Damage assessment

• Containment

• Determine root cause

Information that is lost is not permanently lost

• True

• False

An important tool in protecting information assets is the Economic Espionage Act (EEA) of 1996

• True

• False