Vanessa Marin

Review Exercise
Create an ERD for the following scenario:
Katya is an employee at ABC Co. She works in the Sales Department. She has a supervisor, Chris. The ERD should capture the employee name, SSN, phone […]

Review Exercise
Model the following scenario using a swimlane diagram:
Bob is the warehouse manager of Gadgets, Inc. He is tasked with physical inventory counts. If the count is below the desired inventory […]

Presentation: Presentation

Quiz w/solutions” Quiz w/solutions

What are the 3 types of risk mitigating controls? Which is the most important?  Why is it the most important?
How you would apply the FIPS security categorizations to decide if each of the information […]

What are the 3 types of risk mitigating controls? Which is the most important?  Why is it the most important?

How you would apply the FIPS security categorizations to decide if each of the information security risk mitigations (“safeguards”) described in the FGDC guidelines is needed?

Which two information security objectives could be put at risk if the alternative mitigations (i.e. “safeguards”) recommended by the FGDC guidelines are applied?  Explain how each of the two objective is put at […]

Practice Quiz:Quiz

Presentation:Slides

Review Questions

What is IPO in computing terms?
What is Order to Cash?
What are all the entities involved in a food truck business?
What are the processes involved in such a business model?
What […]

Thank you for your participation in class and an excellent discussion during our first class.

Presentation: Slides

Questions:

Do ITACS students represent information security vulnerabilities to Temple University, each other, or both? Explain the nature of the vulnerabilities.

Is information security a technical […]

Do ITACS students represent information security vulnerabilities to Temple University, each other, or both?
Explain the nature of the vulnerabilities ITACS students represent in the context(s) you chose?

Is information security a technical problem, a business problem that the entire organization must frame and solve, or both?  Explain the nature of the problem in the context(s) you chose.

Provide an example of a measurement used in quantitative information security risk analysis.
What challenges are involved in calculating such a measurement?