Chapter 3 Information Security Pre-assessment

1. Proper ethical and legal training is vital to creating an informed, well prepared, and low-risk system user.

True

False

Proper ethical and legal training is important because it helps individuals understand the rules and principles that govern their actions in a system. It ensures that users are well-informed about the ethical and legal implications of their decisions, which in turn helps them make responsible choices. This training also reduces the risk of potential legal issues or harm caused by unethical behavior. Therefore, it is true that proper ethical and legal training is vital to creating an informed, well prepared, and low-risk system user.

Explanation

Proper ethical and legal training is important because it helps individuals understand the rules and principles that govern their actions in a system. It ensures that users are well-informed about the ethical and legal implications of their decisions, which in turn helps them make responsible choices. This training also reduces the risk of potential legal issues or harm caused by unethical behavior. Therefore, it is true that proper ethical and legal training is vital to creating an informed, well prepared, and low-risk system user.

2. The categories of law that affect the individual in the workplace are private law and public law.

True

False

Private law and public law are two broad categories of law that affect individuals in the workplace. Private law includes laws that govern relationships between individuals, such as contracts and torts. In the workplace, private law may come into play when dealing with employment contracts or disputes between employees. Public law, on the other hand, refers to laws that regulate the relationship between individuals and the government. In the workplace, public law may include laws related to health and safety regulations or employment discrimination. Therefore, it is true that both private law and public law can impact individuals in the workplace.

Explanation

Private law and public law are two broad categories of law that affect individuals in the workplace. Private law includes laws that govern relationships between individuals, such as contracts and torts. In the workplace, private law may come into play when dealing with employment contracts or disputes between employees. Public law, on the other hand, refers to laws that regulate the relationship between individuals and the government. In the workplace, public law may include laws related to health and safety regulations or employment discrimination. Therefore, it is true that both private law and public law can impact individuals in the workplace.

3. The _____________________ allows any person to request access to federal agency records or information not determined to be a matter of national security.

Sarbanes-Oxley Act of 2002

Freedom of Information Act

Security and Freedom through Encryption Act of 1999

The correct answer is the Freedom of Information Act. This act allows any person to request access to federal agency records or information that is not considered a matter of national security. The Sarbanes-Oxley Act of 2002 is a law that regulates financial reporting and corporate governance. The Security and Freedom through Encryption Act of 1999 is a bill that aimed to promote the use of encryption technology.

Explanation

The correct answer is the Freedom of Information Act. This act allows any person to request access to federal agency records or information that is not considered a matter of national security. The Sarbanes-Oxley Act of 2002 is a law that regulates financial reporting and corporate governance. The Security and Freedom through Encryption Act of 1999 is a bill that aimed to promote the use of encryption technology.

4. ____________________ is created by combining pieces of non-private data – often collected during software updates via cookies – then when combined may violate privacy.

Identity theft

Aggregate information

Bookmarking

Aggregate information is created by combining pieces of non-private data, often collected during software updates via cookies. However, when this information is combined, it may violate privacy. This can happen because aggregate information can reveal patterns, trends, or characteristics about individuals, even if the data used to create it is non-private. Therefore, aggregate information can pose a risk to privacy if not handled properly.

Explanation

Aggregate information is created by combining pieces of non-private data, often collected during software updates via cookies. However, when this information is combined, it may violate privacy. This can happen because aggregate information can reveal patterns, trends, or characteristics about individuals, even if the data used to create it is non-private. Therefore, aggregate information can pose a risk to privacy if not handled properly.

5. Civil law addresses violations harmful to society and is actively enforced by the state.

True

False

Civil law primarily deals with disputes between individuals or entities, rather than violations harmful to society as a whole. It focuses on resolving conflicts related to contracts, property, torts, and family law. The state may intervene to enforce civil law decisions, but it is not actively involved in enforcing civil law violations. Criminal law, on the other hand, addresses violations harmful to society and is actively enforced by the state. Therefore, the statement is false.

Explanation

Civil law primarily deals with disputes between individuals or entities, rather than violations harmful to society as a whole. It focuses on resolving conflicts related to contracts, property, torts, and family law. The state may intervene to enforce civil law decisions, but it is not actively involved in enforcing civil law violations. Criminal law, on the other hand, addresses violations harmful to society and is actively enforced by the state. Therefore, the statement is false.