Case 10-21

Identify and briefly explain the problems The Big Corporation could experience with respect to the
confidentiality of information and records in the new system.

• Unauthorized personnel having access to restricted data

• Loss of information on datababse and computers due to fire, water or theft.

Recommend measures The Big Corporation could incorporate into the new system that would ensure
the confidentiality of information and records in this new system.

• Use of electronic ID and passwords

• Encryption for data in transit

• Logs on logon activity

• Anti virus and antispyware software to block out hackers.

• System authentication

• Application level firewalls

• Biometrics and smart cards

• Intrusion detection systems

What safeguards can The Big Corporation develop to provide physical security for its (a) computer
equipment, (b) data, and (c) data processing centre facilities?

• Access control to facilities or data centers or computers with use of access cards and biometrics

• Monitoring on facilities through surveillance, camera, security guards

• Alarm systems for fire, water, burglar or power flunctuations

• Shred any sensitive documents not in use

• Proper disposal of hard drives and other electronic storage media

• Secure storage of backup copies of data and master copies of critical software.