Questions and Answers
Software that protects confidentiality by screening outgoing documents to identify and block transmission of sensitive information is called?
Software that is embedded in documents or files that contain confidential information to indicate who owns that information is called?
Which of the following statements is NOT true?
If an organization asks customers to agree to let the organization collect and use customers' personal information, it is following the consent practice referred to as?
Signup and view all the answers
Which statement is true?
Signup and view all the answers
Which statement is true?
Signup and view all the answers
Which type of encryption is faster?
Signup and view all the answers
If you want to e-mail a document to a friend and be assured that only your friend will be able to open the document, you should encrypt the document using?
Signup and view all the answers
If you want to e-mail a document to a friend so that your friend can be certain that the document came from you, you should encrypt the document using?
Signup and view all the answers
Which of the following statements is true?
Signup and view all the answers
A digital signature is ____________.
Signup and view all the answers
Able wants to send a file to Baker over the Internet and protect the file so that only Baker can read it and can verify that it came from Able. What should Able do?
Signup and view all the answers
Which of the following statements is true?
Signup and view all the answers
Confidentiality focuses on protecting ____________.
Signup and view all the answers
Which of the following statements about obtaining consent to collect and use a customer's personal information is true?
Signup and view all the answers
One of the ten Generally Accepted Privacy Principles concerns security. According to GAPP, what is the nature of the relationship between security and privacy?
Signup and view all the answers
Which of the following statements is true?
Signup and view all the answers
Which of the following statements is true?
Signup and view all the answers
Which of the following can organizations use to protect the privacy of a customer's personal information when giving programmers a realistic data set with which to test a new application?
Signup and view all the answers
Which of the following actions must an organization take to preserve the confidentiality of sensitive information?
Signup and view all the answers
Which of the following is used to protect the privacy of customers' personal information?
Signup and view all the answers
Using your private key to encrypt a hash of a document creates a?
Signup and view all the answers
Replacing sensitive personal information with fake data is called?
Signup and view all the answers
Which of the following helps protect you from identity theft?
Signup and view all the answers
Which of the following Generally Accepted Privacy Principles would an organization violate if it collects and stores your sensitive personal information without your knowledge?
Signup and view all the answers
If the same key is used to both encrypt and decrypt a file, that is an example of what is referred to as a(n)?
Signup and view all the answers
Which of the following factor(s) should be considered when determining the strength of any encryption system?
Signup and view all the answers
_____ provides assurance that someone cannot enter into a digital transaction and then subsequently deny they had done so and refuse to fulfill their side of the contract.
Signup and view all the answers
A website has a checkbox that states, 'Click here if you do NOT want the AJAX company to share your information with third parties and send you offers that you might be interested in' is following the choice and consent practice known as?
Signup and view all the answers
Study Notes
Data Security Concepts
- Data Loss Prevention (DLP): Software designed to protect confidentiality by blocking sensitive information from being transmitted without authorization.
- Digital Watermark: Embedded within documents to show ownership of confidential information, ensuring traceability.
- Information Rights Management (IRM): Controls access to confidential information based on rights management policies.
Encryption and Data Protection
-
Encryption Types:
- Symmetric encryption is faster than asymmetric encryption but does not provide non-repudiation.
- Asymmetric encryption enables verification of the sender's identity through a digital signature.
-
Encryption Functionality:
- Protects confidentiality of information during storage and transmission but not in processing.
- Is deemed necessary for ensuring both confidentiality and privacy, but additional controls are also required.
Consent Practices
-
Opt-in vs. Opt-out:
- Opt-in requires explicit consent from customers before collecting personal information.
- Opt-out means customers must indicate if they do not want their information shared.
Confidentiality and Privacy
- Confidentiality: Focuses on protecting an organization's sensitive information, including intellectual property and strategic plans.
- Privacy: Aims to protect individuals’ personal information from unauthorized access or sharing.
Digital Signatures and Hashing
- A digital signature is created by hashing a document and then encrypting that hash with the signer's private key, providing authentication.
- Hashing is irreversible, while encryption is reversible.
Practical Data Handling and Protection
- Data Masking: Replaces sensitive data with fictitious data for testing without exposing actual sensitive information.
- Tokenization: Used to protect individual pieces of sensitive data, particularly personal information.
- Training and Awareness: Organizations need to train employees on proper handling of sensitive information to maintain confidentiality.
Additional Concepts
- Cookies: Text files for information storage; they do not execute actions.
- VPNs: Provide confidentiality when transmitting information over the Internet.
- Digital Certificates: Contain public keys to verify entities in a digital transaction.
Identity Theft Prevention
- Strategies include regular monitoring of credit reports, shredding sensitive documents, and encrypting personal information in emails.
Privacy Principles and Compliance
- Violating Choice and Consent principles occurs when sensitive information is collected without user knowledge.
- Strength of encryption relies on key management, the algorithm used, and key length.
Key Definitions
- Employee Training: Essential for the preservation of confidentiality of sensitive information.
- Symmetric Encryption System: Uses the same key for both encryption and decryption of data, simplifying the process but requiring secure key management.
Studying That Suits You
Use AI to generate personalized quizzes and flashcards to suit your learning preferences.
Description
Test your knowledge on the key concepts from Chapter 9 of AIS. This quiz focuses on software and technologies that protect sensitive information, including Data Loss Prevention and Information Rights Management. Challenge yourself with these flashcards to reinforce your understanding of confidentiality in information systems.
