ipl-logo

Understand The Importance Of The Three Main Areas Of Accountability

642 Words3 Pages

It is essential that non-technical managers fully understand the importance of the three main areas of accountability, with regards to their company’s information security. Gelbstein (2013, p.27) points out that one of the difficulties with this is that a company’s management is usually in different organizational structures, and do not always get to talk to one another. The three main areas of accountability that I will discuss further are data related, systems related, and people related. Each area is an important element needed to defend companies’ data against unauthorized access, disclosure, use, deletion, etc. It used to be easier for management to keep paper data locked away in a room, with only select employees having access to it. However, with technology advancement, came the added strain of needing to secure anything stored on a computer hooked up to the Internet, or with cloud storage. Accountability helps with identifying any operations that individuals or systems have carried out, and guarantees the operations will be traced.

Data Related Area …show more content…

As much as it sounds ideal to prevent all employees from accessing all data, it is unrealistic because (especially in large organizations) assigning individual access rights would be too time-consuming and difficult. Also, claiming complete transparency is not a very sound idea, as there is plenty of data that should be kept private, and not made for public eyes. An example of keeping data classified would be a Geico insurance agent stationed at one location, accessing data at another Geico location; there is simply no reason why they should be able to access more peoples’ data than that of their own clients; governance should be in place to be sure that integrity is always assured and the right permissions are used, which aptly leads me onto the next area to

Show More
Related

  • Nt1310 Unit 5 Security Testing Plan

    149 Words  | 1 Pages

    The security controls, policies, procedures, and guidelines were tested using the security testing plan that was evaluated by a security team to correct and report flaws in the system design. The only major flaw doesn’t relate to the network or the physical system itself, but instead policies and procedures seem to be at the highest risk. Policies and procedures explain that the chain of custody during media transportation and disposal should be logged and tracked impeccably. I believe putting stronger controls in place for the transportation of media would lower the risk of exposed confidentiality tremendously. I believe each device used to transport should be trackable at any given time, rather than just by logs.

    Read More

  • Tv511 Unit 5 Summary

    1522 Words  | 7 Pages

    In addition, the business data will be stored on these devices, being or not protected only by the individual security awareness of each employee. Therefore, it is likely that the confidentiality of corporate data will be compromised if an employee’s device is lost or stolen. Take Godiva, a chocolate manufacturer, as an example. On November 25, 2014, they notified employees of the company of a data breach when a Human Resources employee, who was traveling to retail sites, had a briefcase stolen from a car. The briefcase contained a laptop that had employee information on it.

    Read More

  • Unit 3 Assignment 3: Setting File File Permissions

    453 Words  | 2 Pages

    Setting file permissions will ensure that only those employees who are supposed to see the private information, will be the only ones to see it. File permissions need to be set by department. For example, employees in marketing does not need to see files from anyone

    Read More

  • Nt1330 Unit 3 Paper

    513 Words  | 3 Pages

    Every page, folder, template, group and user record has an audit trail that captures every change made, with the date/time and user stamp to indicate who made the change and when. Users with appropriate security access can view this information, and reporting is also available to pinpoint specific types of changes or to narrow down records to specific time frames. 6. How does the system ensure availability, security and privacy of data on shared

    Read More

  • Task 1 Information Storage Essay

    1080 Words  | 5 Pages

    Task 1A Information Storage Procedures Management Data Employee information Employee information will be stored inside a laboratory office or in HR. the non-confidential information will be stored in paper files, the confidential information will be kept in either paper files in a locked filing cabinet, or on a computer file secured with a password. This information will be updated as required due to any new required information or any changes to the existing information stored in these files. We must keep this information as there may be medical records or allergies which we need to access Work schedules The laboratory work schedules are kept in the staffroom, in the main office or possibly could be available online.

    Read More

  • HIPAA Regulations: Limiting Or Disclosing PHI?

    706 Words  | 3 Pages

    Each employee should have just enough access to your medical record system to do their job. For instance, an employee who only answers the phone and sets appointments doesn’t generally need access to medical histories, x-rays, and other specific medical information. Therefore, their level of access to your practice software should be limited to seeing the schedule and creating or changing appointments. Alternatively, an employee who only treats patients and never handles billing information should not have access to credit card numbers, health insurance plan ID numbers, or other financial information in your systems. It may seem easier to just give everyone access to everything.

    Read More

  • Analysis Of Fixing Our National Accountability Problems By Marc Tucker

    522 Words  | 3 Pages

    Since the passage of No Child Left Behind Act 12 years ago, teachers are judged based on standardized tests and their students’ scores. The tests are often used as a measure for schools to determine if teachers should keep their jobs. The whole teaching profession is being shamed as inadequate. Joe Nocera, opinion columnist for the New York Times newspaper, by examining a thinker named Marc Tucker, argues for a new way to approach educational reform. To begin with, Nocera addresses reforming and reconstructing our current schools.

    Read More

  • Importance Of Accountability In The Military

    983 Words  | 4 Pages

    Accountability Is something that is very important and leader and superiors in the Military or in any job for that reason, for the simple fact that it is not only a requirement for you but also very important to your supervisors or chain of command depending on your situation. You can resort to accountability for many reason when it comes to daily productivity as a team or group. Maintaining accountability of anything wether it be equipment or people can be very helpful when it comes to dividing tasks and assignments or just keeping track of everybody or everything you are in charge of. Punctuality is also very important and plays a very big part in accountability, for example, a soldier is late to formation and doesn’t inform his supervisor, this can lead to his supervisor not being able to provide accurate numbers to his/her

    Read More

  • Gramm-Bliley Act Of 1999 (FSMA)

    512 Words  | 3 Pages

    Over time, “computer and information technology (IT) for gathering, storing, manipulating, and communicating data are revolutionizing the use and spread of information” (Lynch, 1994, para. 1), in which IT is making the world that has become more open, “ubiquitous in the lives of people across the global” (Sullings, 2014, para. 1). Along the way, every advancement in information technology (IT) is accompanied by ethical issues (Mehrotra, 2012, p. 419). The fundamental ethic issues in IT are the privacy, property, accuracy, and use of individuals’ personal sensitive information. The Fair Credit Reporting Act of 1970 (FCRA); and the Financial Services Modernization Act of 1999 (FSMA), which also known as Gramm-Leach-Bliley Act of 1999 (GLBA) are two examples of important pieces of legislation regarding the financial industry and privacy. These two legislations have been created as a direct response to consumer privacy and security protections in the advancements of IT that resulted in new ethical issues.

    Read More

  • Hrm/531 Week 1 Data Analysis Paper

    525 Words  | 3 Pages

    And who enforces the data access controls? (Brown, 2012). Who should be the data owner? The data owner should be able to establish, and uphold, data principals for all users, including executives and board members who have access to data beyond receiving reports from the data. The owner will treat data as an asset to the company, and get others to treat data in the same manner (Khatri & Brown, 2010, p. 150).

    Read More

  • Nt1110 Unit 3

    1424 Words  | 6 Pages

    Having security basically means that the data is safe from unauthorised or unexpected access, modification or deletion of files. Due to the vast majority of files being stored on a form of electronic device in the modern world, it is the job of the company, in this case Tesda, to ensure that access is limited to certain individuals and that they pose no threat to the company. Although there are many ways of accessing this information illegally, Tesda should concentrate on protecting against the most common types like viruses and system failure etc. Ensuring that there is a backup server is essential as this information is what keeps the business running and losing it will have a massive impact on them. Within Tesda, it will be the role of the management to assess who should and shouldn’t be granted access to particular bits of information and whether or not they will have it as read only or being able to edit the document.

    Read More

  • Nt1330 Unit 3 Information Security Risk Management

    223 Words  | 1 Pages

    The Information Security Manager reports in their capacity to the CEO. Company officers, executives, directors, employees, contractors and third party service providers cooperate and work with the Information Security Manager to ensure the protection of customer’s non-public information and Licensee’s Information Assets. Policies, such as Enterprise Antivirus Program, Network Access, Software Development Security Standards, Physical Security, Vendor Manangmenet Ativirus, Mobile Computing/Remote Access, Inromation Security Risk Assessment, Social Media, Data Loss Prevention, and Secuiryt Incident Response Policies have been implemented to protect customer’s non-public personal information and company Information

    Read More

  • Importance Of Accountability In The Army

    1012 Words  | 5 Pages

    Accountability In The Army What is accountability ?. Accountability is the obligation that an individual or an organization has to be answerable, take responsibility for its actions, and provide an account in a transparent manner. Achievement of this character trait in an organization requires every individual in an organization to own up to his or her responsibilities, their actions and the results after that. Accountability is crucial due to various reasons. Accountability can make someone trustworthy it can provide responsibility it can encourage ownership it can.

    Read More

  • Political Factors Affecting Ulta Beauty

    913 Words  | 4 Pages

    For operational purposes, the company collects and stores confidential information about their customers, employees, suppliers, and vendors. For purposes of their rewards program, the company collects sensitive and confidential consumer information. Although security measures and information technology systems have been put in place to ensure secure transmission and storage of confidential information, security breaches, computer viruses, or even human error can occur. Any of these events could cause data to be lost or stolen, as well as disclosed and used with malicious intent. Such occurrence could lead to litigation, fines, increased security costs, and damage to

    Read More

  • Nt1310 Unit 3 Network Security

    563 Words  | 3 Pages

    Access control describes selective choosing of the information on the network and only authorised users have access to those information. Accessing information means utilising the data for business processing activities on the network. The access control is secured with the help of username and password for which the access to information is given to only a set of authorised users on the

    Read More

More about Understand The Importance Of The Three Main Areas Of Accountability

Open Document