IT 303-Q2

is defined as individual facts

• Data

• Assets

• information

• Document

is the organization and interpretation of those facts.

• files

• Documents

• Data

• information

In what scope is telecommunication?

• None of the above

• Type

• Nature of business

• Size

who rely on information systems but may not have a good understanding of IT risk and how to manage it

• Chief risk officer

• Business owners

• Chief information officer

• None of the above

who ensures the implementation of information

assurance for an organization’s information systems

• mission owners

• Chief information officer (CIO)

• Chief risk officer (CRO)

• Enterprise owners

who are

responsible for the IT procurement process

ranging from single proprietors to small and medium businesses who want to protect their assets and manage risk

who implement the security program

who audit the systems and ensure compliance with the relevant policies

and regulations

who want to understand why their organization has so many rules,

policies, and guidelines