Finals - Information Management

What is access control in the context of information security?

• Managing internet connectivity
• Restricting unauthorized access to resources
• Encrypting data at rest
• Storing backup copies of files

What does authentication involve in information security?

• Identifying and verifying the identity of users or systems
• Encrypting data during transmission
• Backing up files to external servers
• Monitoring network traffic

What is the purpose of data encryption in information security?

• Hiding data from authorized users
• Making data indestructible
• Protecting data confidentiality and integrity
• Increasing data transfer speed

What does anonymization of data involve?

• Encrypting data at rest
• Removing personally identifiable information from data
• Backing up data to cloud servers
• Compressing data files

What does risk management focus on in the context of information security?

• Ensuring 100% data security
• Identifying, assessing, and mitigating potential risks
• Encrypting all data in the system
• Storing backup tapes offsite

What is the primary goal of incident response in information security?

• Identifying potential incidents before they occur
• Recovering from and minimizing the impact of security incidents
• Preventing all security incidents from happening
• Encrypting all communication channels

What ethical issue in I.M. pertains to using someone else's work without proper citation or permission?

• Piracy
• Plagiarism
• Hacking
• Phishing

What does the Health Insurance Portability and Accountability Act (HIPAA) address in the United States?

• Banking regulations
• Data privacy and security of health information
• Copyright laws
• Environmental regulations

What is the primary concern of legal issues in information management?

• Ensuring data availability
• Protecting data confidentiality and integrity
• Compliance with laws and regulations
• Enhancing data processing speed

Set of rules and practices that outline how sensitive and private information should be handled within an organization?

• Data encryption standards
• Privacy policy
• Access control protocol
• Risk management guidelines
• …