integrity of data and information systems
This revision notes summarises the main kinds of physical security controls that are used to protect information systems
Physical Access Controls
Access controls are designed to prevent unauthorised access to hardware and/or data storage. The main kinds of access control are:
| Human error: e.g. entering incorrect transctions; failing to spot and correct errors; processing the wrong information; accidentally deleting data |
| Technical errors: e.g. hardware that fails or software that crashes during transaction processing |
| Accidents and disasters: e.g. floods, fire |
| Fraud - deliberate attempts to corrupt or amend previously legitimate data and information |
| Commercial espionage: e.g. competitors deliberately gaining access to commercially-sensitive data (e.g. customer details; pricing and profit margin data, designs) |
| Malicious damage: where an employee or other person deliberately sets out to destroy or damage data and systems (e.g. hackers, creators of viruses) |
How Can Information Systems be Made More Secure?
There is no such thing as failsafe security for information systems. When designing security controls, a business needs to address the following factors;
| Prevention: What can be done to prevent security accidents, errors and breaches? Physical security controls (see more detailed revision note) are a |
| Detection: |
| Accidents and disasters: e.g. floods, fire |
| Fraud - deliberate attempts to corrupt or amend previously legitimate data and information |
| Commercial espionage: e.g. competitors deliberately gaining access to commercially-sensitive data (e.g. customer details; pricing and profit margin data, designs) |
| Malicious damage: where an employee or other person deliberately sets out to destroy or damage data and systems (e.g. hackers, creators of viruses) |
Search tutor2u...
tutor2u Home Page | Online Store | Contact Us | About tutor2u | Copyright Info | Your Privacy | Terms of Use
Working with Our Strategic Partners Zondle - Games for Learning | Sapphire Education | Vue Cinemas Boston House | 214 High Street | Boston Spa | West Yorkshire | LS23 6AD | Tel +44 0844 800 0085 | Fax +44 01937 529236 Company Registration Number: 04489574 | VAT Reg No 816865400 tutor2u is proud to sponsor TABS Cricket Club and the Wetherby Junior Cricket League as part of our commitment to encourage participation in local junior sport
|
