Topic 1: Privacy Policies
Many countries require organizations that collect personal information to publish a privacy policy that will outline how the company will handle and use this information. Find a copy of the privacy policy for an organization that has asked you to provide personal information. Does their policy address all of the principles discussed in the text? (Reference Section 19.3). Which areas are lacking? Comment on another student's post.
Topic 2: Secure Network Client OS
All operating systems have a set of "kernel" code that contains the basic core of the operating system. The kernel code allows the user to control the hardware and many of the applications used by the computer. A number of "security kernels" have been designed that are intended to protect the operating system from unauthorized modification as well as controlling access to the OS and ensuring that the operating system functions correctly.
One obvious disadvantage to deploying an OS with a security kernel is that the security code incurs additional processing overhead. What other disadvantages and advantages might be involved? If considered as a client OS to be deployed across an organization, under what circumstances would the disadvantages of a security kernel be justified? Why?