LO2 - Understand the issues related to use of information

-

2.1 Legal Issues


Data Protection Act 1998
Personal information
Example: IC, Driving license.

Principles of Data Protection Act:

  • Fairly and lawfully processed
  • Processed for limited purpose
  • Adequate, relevant and not excessive.
  • Accurate and up to date.
  • Not kept for longer than is necessary.
  • Processed in line with your rights.
  • Secure.
  • Not transferred to other countries without adequate protection.


Freedom of Information Act 2000
The public will gains access information from the government.
Example: Population, Weather, Minister.

Computer Misuse Act 1990
The law that is given so that the people will not misuse the computer.
Example: Hacking, Identity theft.
Offences:

  • Unauthorised access to any computer program or data. (For fun)
  • Unauthorised access with intent to commit a serious crime. (For crime)
  • Unauthorised modification of computer contents.


2.2 Ethical Issues


 Codes of Practice
The rules on how the workers should follow in order to work in a company.
Example: Email (Use it for work purpose only, not for personal information)
Personal appearance ( Proper attire such as formal shoes, not slipper)

Organizational Policies
Guidelines that need to be follow.
Example: Internet policy, Identity card.

Information Ownership
You owned the information. who ever create the information.
Copyright
Example: Website,

2.3 Operational Issues


 Security of Information
system users expect the ICT department to keep its information.
Safe from unauthorized or unexpected access.

Backups
Extra copy of your information.

Health and Safety
In organization, to make sure the working environment is safe.
Example - Eye test

Organizational Policies
Organizations have policies for the use of information systems which their staff should follow.
Keeping information confidential in a company.

Business Continuance Plans
Its like backup which will continue working using other plan.

Costs
To make sure to manage the money and cost properly so that the business will continue.

Impact of Increasing Sophistication of System
From manual become automatic
Nowadays, we need to make sure the employee have a proper training because the technology is very complicated.

Comments

Post a Comment

Popular posts from this blog

WAN Technology

-
Image
MPLS Describe MPLS is stands for Multiprotocol label switching which is a mechanism used inside the computer network infrastructures to speed up the time it takes a data packet to flow from a node to another. Diagram How it works In MPLS , packets are directed through the network based on an assigned label with original IP routing in a packet- switched network, each data packet could determine its own path through the network. Examples Traffic engineering network management ATM Description ATM is a technique for packet switching that is used by telecommunication networks which they used asynchronous time-division multiplexing to encode data into small fixed sized cells. It is known as Asynchronous Transfer Mode. Diagram How it works The sender and receiver on a network creates a fixed channel between each other before sending the data and then the information will be sent in order. Example It is used in the campus backbone. References Tech...
Read more

LO3 - Know the features and functions of information systems

-
3.1 Features of Information Systems An information system has 5 parts: Data Raw information The data input to the system must be accurate It should be stored in logical way such as pen drive and hard disk. People People are involved both in capturing the data and manage the information. Hardware Management information system (MIS) may run on just the sales and finance director's PC. It usually runs on a server, either shared or dedicated with Internet or intranet access for those who need it. Used for storing data. It is unusual to require specialized hardware. computer and server Software MIS can be built using standard software. manage the information in the computer. Telecommunications To connect with the use of internet. MIS are delivered across an intranet within a company's firewall for protection from competitors and others seeking this valuable management information. Used to protect and secure the data. 3.2 Functions of Information Systems ...
Read more

WDD - LO1 - MANAGE SECURE SITES

-
1. Keep the Software Up to Date Always keep the website to be up to date so that no hacker will not easily access onto the information from the web server. - Need to keep the website up to date so that to protect it from getting new threats. 2. Block SQL Injection SQL injection is an attack which vulnerable on bypassing the security of the website application. By inputting validation and limiting the queries can prevent the SQL injection attacks. - adding of codes to the database with a proper language 3. Prevent XSS Cross-site Scripting (XSS) will manipulate the vulnerable website into a malicious code for the user and when it is executed, the attacker can access and interact with the user's application. - Client-side - the attacker create a script or code to bypass the security of the application. 4. Providing Minimal Error Messages  Creating a least error messages for the website to be secured so that the information of the website will not be lost. such as Err...
Read more