Guaranteed Success
First Class Honours
IS 3350 Week 9
IS 3350 Week 9
IS 3350 Week 9 Lab Design and Implement IT Security Policies to Help Mitigate Risk (ITT Tech)
1. Which IT assets did you prioritize as critical to administrative or student computing?
2. List your top five (5) risk exposures for which you believe this school should have specific risk mitigation strategies.
3. Given the potential risks that you identified, what IT security policies would you recommend be created by the school to help mitigate each of the identified risk exposures you listed in #2 above?
4. True or False. FERPA compliance law is about protecting the privacy data of students including personal information, grades, and transcripts. The law itself defines a privacy requirement but it does not specifically address security controls and security countermeasures.
IS 3350 Week 9
5. Given that student privacy data is typically housed within administrative computers, systems, and databases, what can you do to mitigate the risk exposure that a student or someone on the student or school’s network can access these systems?
6. For a school under FERPA compliance law, do you think the administrative computing or student computing network infrastructure is more important from a business and delivery of education perspective?
7. The school monitors the use of student social networking on Facebook, MySpace and Twitter. What should the school define and implement if it wants to define acceptable and unacceptable use of school IT assets, Internet, e-mail and use of personal laptop computers on the school’s network?
