Transcript Chapter 12
1 Management Information Systems ManagIng Information Technology in the E–Business Enterprise Sixth Edition James A. O’Brien Chapter 12 Security and Ethical Challenges of E-Business Irwin/McGraw-Hill Copyright © 2004, The McGraw-Hill Companies, Inc. All rights reserved. James A. O’Brien Management Information Systems Fifth Edition 2 Security and Ethical Challenges Privacy Employment Health Individuality Irwin/McGraw-Hill Security Ethics and Society Crime Working Conditions Copyright © 2002, The McGraw-Hill Companies, Inc. All rights reserved. James A. O’Brien Management Information Systems Fifth Edition 3 Computer Crime Cyber Theft Hacking Computer Viruses Unauthorized Use at work Irwin/McGraw-Hill Piracy Copyright © 2002, The McGraw-Hill Companies, Inc. All rights reserved. James A. O’Brien Management Information Systems Fifth Edition 4 Employment Challenges Lost Job Opportunities Lost Individuality Working Conditions Computer Monitoring Irwin/McGraw-Hill Health Issues Copyright © 2002, The McGraw-Hill Companies, Inc. All rights reserved. James A. O’Brien Management Information Systems Fifth Edition 5 Ethical Considerations • Ethical Principles – Proportionality – Informed Consent – Justice – Minimized Risk Irwin/McGraw-Hill • Standard of Conduct – Act with integrity – Protect the privacy and confidentiality of information – Do not misrepresent or withhold information – Do not misuse resources – Do not exploit weakness of systems – Set high standards – Advance the health and welfare of general public Copyright © 2002, The McGraw-Hill Companies, Inc. All rights reserved. James A. O’Brien Management Information Systems Fifth Edition 6 Security Management of E-Business Encryption Fire Walls Virus Defenses Denial of Service Defenses Irwin/McGraw-Hill Monitor E-mail Copyright © 2002, The McGraw-Hill Companies, Inc. All rights reserved. James A. O’Brien Management Information Systems Fifth Edition 7 Other E-Business Security Measures Security Codes Backup Files Security Monitors Biometric Security Controls Irwin/McGraw-Hill Copyright © 2002, The McGraw-Hill Companies, Inc. All rights reserved. James A. O’Brien Management Information Systems Fifth Edition 8 Computer System Failure Controls Fault Tolerant Systems Fail-Over Layer Fail-Safe Threat Applications Environmental, HW and SW Faults Systems Outages Databases Data errors Networks Transmission errors Processes Files HW and SW faults Media Errors Processors HW Faults Irwin/McGraw-Hill Fail-Soft Fault Tolerant Methods Application redundancy, Checkpoints System isolation Data security Transaction histories, backup files Alternate routing, error correcting routines Checkpoints Replication of data Instruction retry Copyright © 2002, The McGraw-Hill Companies, Inc. All rights reserved. James A. O’Brien Management Information Systems Fifth Edition 9 Disaster Recovery • Who will participate? • What will be their duties? • What hardware and software will be used? • Priority of applications to be run? • What alternative facilities will be used? • Where will databases be stored? Irwin/McGraw-Hill Copyright © 2002, The McGraw-Hill Companies, Inc. All rights reserved. James A. O’Brien Fifth Edition Management Information Systems 10 E-Business System Controls and Audits Input Controls Processing Controls Output Controls Fire walls Software Hardware Checkpoints Security Codes Encryption Control Totals User Feedback Security Codes Encryption Error Signals Storage Controls Irwin/McGraw-Hill Security Codes Encryption Backup Files Copyright © 2002, The McGraw-Hill Companies, Inc. All rights reserved.