Answer the questions in straight to the point short answers. please answer them as they are numbered. shouldn't be more than 500 words
Universities store some important information assets like
1. Human resources payroll information (includes identification and financial information of faculty and staff)
2. Parking permit information, and
3. Counseling centre information.
a) For EACH of the three types of information describe who would want to illegally access this type of information and why?
b) Consider what the impact would be for EACH of the three types of information mentioned above if the information was improperly accessed or damaged. Is the impact Catastrophic(expose school to serious lawsuits, loss of reputation, and/or information cannot be recreated), Serious (some exposure to lawsuits, loss of reputation and/or information is expensive to recreate) or no big deal(small chance of lawsuits, information can easily be recreated). justify your answer
c) Consider what the likelihood is that EACH type of information could be accessed or damaged: not likely, moderately likely, very likely. Justify why you think the information fits in that category.
d) Let's look at how we can manage the risk. Basic techniques are: avoiding the risk, modifying the risk (impact and/or likelihood), transferring the risk to others, and accepting the risk. What techniques would you use for EACH of the types of information and how would you implement it?