How is the security of a firm's information system and data ...

[MGLQZ]

How is the security of a firm's information system and data affected by its people, organization, and technology? Is the contribution of one of these dimensions any more important than the other? Why?
 
  What will be an ideal response?

Question 2

Which of the following is a file format used to exchange contact management data electronically?
 
  A) .ics
  B) iCalendar
  C) .exe
  D) hCard

[nickk12214]

Answer to Question 1

There are various technological essentials to protecting an information system: firewalls, authentication, encryption, anti-virus protection etc. Without technology implemented correctly, there is no security. A firm's employees are its greatest threat, in terms of embezzlement and insider fraud, errors, and lax enforcement of security policies. Probably the most important dimension is organization, because this is what determines a firm's business processes and policies. The firm's information policies can most enhance security by stressing intelligent design of security systems, appropriate use of security technology, and the usability of its security processes.

Answer to Question 2

D