Exam 2: Chp. 3, 4, & 5

Front 1

refers to the principles of right and wrong that individuals use to make choices that guide their behavior

Back 1

Ethics

Front 2

is a collection of principles intended to guide decisions to guide decision making by members of the organization

Back 2

Code of Ethics

Front 3

What is _____ is not necessarily ____

Back 3

unethical; illegal

Front 4

Responsibility

Accountability

Liability

Back 4

Fundamental Tenets of Ethics

Front 5

a tenet ethics in which you accept the consequences of your decisions and actions

Back 5

Responsibility

Front 6

a tenets of ethics that refers to determining who is responsible for actions that were taken

Back 6

Accountability

Front 7

a legal concept that gives individuals the right to recover the damages done to them by other individuals, organizations, or systems

Back 7

Liability

Front 8

1. Privacy

2. Accuracy

3. Property

4. Accessibility

Back 8

The 4 categories ethical issues fall under

Front 9

the legal right to left alone and to be free of unreasonable personal intrusion

Back 9

Privacy

Front 10

involve collecting, storing,. and disseminating information about individuals

Back 10

Privacy issues

Front 11

involve the authenticity, fidelity, and correctness of information that is collected and processed

Back 11

Accuracy issues

Front 12

involve the ownership and value of information

Back 12

Property issues

Front 13

revolve around who should have access to information and whether a fee should be paid for the access

Back 13

Accessibility issues

Front 14

the right to determine when, and to what extent, personal information can be gathered by and/or communicated to others

Back 14

Information privacy

Front 15

an electronic description of an individual and his or her habits

Back 15

Digital Dossier

Front 16

tracking people's activities with the aid of computers

Back 16

Electronic Surveillance

Front 17

Data aggregators sell digital dossiers to companies that want to know their customers better. This practice is called ________.

Back 17

Customer Intimacy

Front 18

a model of informed consent in which a business is prohibited from collecting any personal information unless the customer specifically authorizes it

Back 18

Opt-In Model

Front 19

a model of informed consent that permits a company to collect personal info until the customer specifically requests that the data not be collected

Back 19

Opt-Out Model

Front 20

are an organization's guidelines for protecting the privacy of its customers, clients, and employees

Back 20

Privacy codes/policies

Front 21

the process of forming digital dossier

Back 21

Profiling

Front 22

the ____________ ethical standard states that an ethical action is the one that best protects and respects the moral rights of the affected parties.

Back 22

rights

Front 23

refers to all of the processes and policies designed to protect an organization's info and info systems (IS) from unauthorized access, use, disclosure, disruption, modification, or destruction

Back 23

Information Security

Front 24

is an attack in which the perpetrator uses social skills to trick or manipulate legitimate employees into providing confidential company info such as passwords

Back 24

Social Engineering

Front 25

occurs when an unauthorized individual attempts to gain illegal access to organizational information

Back 25

Espionage or trespass

Front 26

occurs when an attacker either threatens to steal, or actually steals info from a company

Back 26

Information Extortion

Front 27

are deliberate acts that involve defecting an organization's Web site, possibly causing the organization to lose its image and experience a loss of confidence by its customers

Back 27

Sabotage and vandalism

Front 28

becoming a larger problem because computing devices and storage devices are becoming smaller yet more powerful with vastly increased storage making it easier and more valuable to steal

Back 28

Theft of equipment and information

Front 29

is the deliberate assumption of another person's identity, usually to gain access to his or her financial info or to frame him or her for a crime

Back 29

Identity theft

Front 30

is a vital issue for ppl who make their livelihood in knowledge fields

Back 30

Preventing compromises to intellectual property

Front 31

occurs when malicious software penetrates an organization's computer system

Back 31

Software attacks

Front 32

_____ are segments of computer code that attach to existing computer programs and perform malicious acts.

Back 32

Virus

Front 33

is clandestine software that is installed on your computer through duplicitous methods

Back 33

Alien software

Front 34

refers to a large-scale, distributed measurement and control systems, SCADA systems are used to monitor or control chemical, physical, and transport processes and attempts to compromise such a system in order to cause damage to the real-world processes that the system controls

Back 34

Supervisory control and data acquisition

Front 35

attackers use a target's computer systems, particularly through the internet, to cause physical real-world harm or severe disruption usually to carry out a political agenda

Back 35

Cyberterrorism and Cyberwarfare

Front 36

In _____, the organization purchases insurance as a means to compensate for any loss.

Back 36

Risk Transference

Front 37

controls that restrict unauthorized individuals from gaining access to a company's computer facilities

Back 37

Physical Controls

Front 38

controls that restrict unauthorized individuals from using information resources and are concerned with user identification

Back 38

Access controls

Front 39

Access controls involve _____ before _____.

Back 39

authentication; authorization

Front 40

controls that deal with the movement of data across networks

Back 40

Communication controls

Front 41

a repository of historical data that are organized by subject to support decision makers in the organization

Back 41

Data warehouse

Front 42

a low-cost, scaled-down version of a data warehouse that is designed for the end-user needs in a strategic business unit (SBU) or a department

Back 42

Data-mart

Front 43

an approach to managing info across an entire organization

Back 43

Data governance

Front 44

a method for analyzing and reducing a relational database to its most streamlined form for minimum redundancy, maximum data integrity, and best processing performance

Back 44

Normalization

Front 45

collection of definitions of data elements; data characteristics that use the data elements, and the individuals, business functions, applications, and reports that use this data element

Back 45

Data Dictionary

Front 46

diverse, high-volume, high-velocity, information assets that require new forms of processing to enable enhanced decision making, insight discovery, and process optimization

Back 46

Big Data

Front 47

a person, place, thing, or event about which information is maintained in a record

Back 47

Entity

Front 48

each characteristic or quality describing a particular entity

Back 48

Attribute

Front 49

the identifier field or attribute that uniquely identifies a record

Back 49

Primary Keys

Front 50

an identifier field or attribute that has some identifying information but typically does not identify the file with complete accuracy

Back 50

Secondary Key

Front 51

the cumulative store of subjective or experiential learning, which is highly personal and hard to formalize

Back 51

Tacit knowledge

Front 52

the more objective, rational, and technical types of knowledge

Back 52

Explicit knowledge

Front 53

Bit – byte – field – record – file – database

Back 53

Members of the Data Hierarchiy in order

Front 54

represents the smallest unit of data a computer can process

Back 54

Bit

Front 55

represents a single character, and can be a symbol, number, or letter

Back 55

Byte

Front 56

a grouping of logically related characters into a word, a small group of words, or a complete number

Back 56

Field

Front 57

a grouping of logically related records

Back 57

File

Front 58

a grouping of logically related fields, describes an entity

Back 58

Record

Front 59

a group of logically related files that stores data and the associations among them

Back 59

Database

Front 60

_____ occurs when applications cannot access data associated with other applications.

Back 60

Data isolation

Front 61

_____ occurs when various copies of the data agree.

Back 61

Data consistency

Front 62

When data are normalized, attributes in the table depend only on the _____.

Back 62

Primary key

Front 63

What are the three distinct characteristics that distinguish big data from traditional data?

Back 63

Volume, Velocity, and Variety

Front 64

How does society keep owners of electronic bulletin boards from disseminating offensive or untrue content? This is a difficult question because it involves the conflict between _____ on the one hand and _____ on the other.

Back 64

Freedom of speech; Privacy

Front 65

the likelihood that a threat will occur

Back 65

Risk

Front 66

a strategy in which the organization accepts the potential risk, continues to operate with no controls, and absorbs any damages that occur

Back 66

Risk Acceptance

Front 67

the process in which an organization asses value of each asset being protected, estimates the probability that each asset might be compromised, and compares the probable costs of each being compromised with the costs of protecting it

Back 67

Risk Analysis

Front 68

a strategy in which the organization limits its risk by implementing controls that minimize the impact of a threat

Back 68

Risk Limitation

Front 69

a process that identifies, controls, and minimizes the impact of threats, in an effort to reduce risk to manageable levels

Back 69

Risk management

Front 70

a process whereby the organization takes concrete actions against risks, such as implementing controls and developing a disaster recovery plan

Back 70

Risk Mitigation