Write a short note on information systems risk assessment. What ...

[burton19126]

Write a short note on information systems risk assessment. What are the three ways in which organizations react to perceived risks?
 
  What will be an ideal response?

Question 2

In SQL Query Analyzer, the statement used to show all employee social security
  numbers and names that don't have jobs assigned to them, would be __________.
 
  Fill in the blanks with correct word

[anyusername12131]

Answer to Question 1

A good approach to securing information systems begins with a thorough information systems risk assessment to obtain an understanding of the risks to the confidentiality, integrity, and availability of data and systems. Organizations assess the value of the assets being protected, determine their probability of being compromised, and compare the probable costs of their being compromised with the estimated costs of whatever protections they might have to take. This process is known as information systems risk assessment.
The three ways in which organizations react to perceived risks are as follows:
1. Risk Reduction: Taking active countermeasures to protect systems, such as installing firewalls.
2. Risk Acceptance: Implementing no countermeasures and simply absorbing any damages that occur.
3. Risk Transference: Having someone else absorb the risk, such as by investing in insurance or by outsourcing certain functions to another organization with specific expertise.

Answer to Question 2

Select employee.ssn, employee.name From employee Where employee.ssn Not In (Select Distinct job.ssn From job)