LO5 - 5.2 Operational Issues

What is security of information?

• Maintaining the health, safety and welfare of employees
• Keeping data safe from authorised access
• A method of dealing with change in an organisation
• A written set of rules or principles that use be adhered to

How can information security be addressed? (3 Answers)

• Implementing policy on who can view and update information
• Talking to other staff about sensitive information
• Ensuring documents are left lying around the office
• Backing up data regularly
• Implementing disaster recovery procedures

How can information security be addressed? (3 Answers)

• Strategies to help people adapt
• Train employees to respect information security
• Implement risk assessments
• Implementing procedures to request change
• Comply with legislation

What is health and safety?

• Maintaining the health, safety and welfare of employees
• Keeping data safe from authorised access
• A method of dealing with change in an organisation
• A written set of rules or principles that use be adhered to

How can health and safety be adhered to? (2 Answers)

• Implementing procedures to request change
• Complying with the use and position of screens
• Complying with health and safety legislation
• Comply with legislation
• Train employees to respect information security

What is disaster planning and recovery?

• Keeping data safe from authorised access
• Planning for the recovery of data and systems failure
• Maintaining the health, safety and welfare of employees
• A written set of rules or principles that use be adhered to

What is good disaster recovery planning? (3 Answers)

• Clear documentation to recover data
• Having a single person responsible for it
• Identification of roles in a disaster
• Risk assessments for threats
• Not informing everyone of their roles

What is good disaster recovery planning? (2 Answers)

• Dual networks
• Ensuring plans are kept in a hard to reach location
• Additional capacity/servers
• Allows lots of people to have their input

What is an Acceptable Usage Policy?

• Keeping data safe from authorised access
• Document containing limitations and practices that must be adhered to
• Maintaining the health, safety and welfare of employees
• A written set of rules or principles that use be adhered to

What are Codes of Conduct?

• A written set of rules or principles that use be adhered to
• Keeping data safe from authorised access
• Enables people to access a corporate network
• Maintaining the health, safety and welfare of employees