Mis 309

A branch of philosophy that deals with what is considered to be right and wrong.

a collection of principles that are intended to guide decision making by members of an organization

of informed consent means that organizations are prohibited from collecting any personal information unless the customer specifically authorizes it. (Preferred by privacy advocates.)

The tracking of people‘s activities, online or offline, with the aid of computers.

An organization’s guidelines with respect to protecting the privacy of customers, clients, and employees.

of informed consent permits the company to collect personal information until the customer specifically requests that the data not be collected.

of an information resources is the harm, loss or damage that can result if a threat compromises that resource.

an attack where the attacker uses social skills to trick a legitimate employee into providing confidential company information such as passwords.

Intellectual work, such as a business plan, that is a company secret and is not based on public information

Document that grants the holder exclusive rights on an invention or process for 20 years.

Statutory grant that provides creators of intellectual property with ownership of the property for life of the creator plus 70 years.

Copying a software program without making payment to the owner.

is a segment of computer code that performs malicious actions by attaching to another computer program.

is a segment of computer code that performs malicious actions and will spread by itself without requiring another computer program.

is a computer program that hides in another computer program and reveals its designated behavior only when it is activated.

use deception to acquire sensitive personal information by masquerading as official-looking e-mails or instant messages.

collects personal information about users without their consent. Two types of spyware are keystroke loggers (keyloggers) and screen scrapers

record your keystrokes and your Web browsing history.

record a continuous “movie” of what you do on a screen.

is alien software that is designed to use your computer as a launchpad for spammers.

are small amounts of information that Web sites store on your computer.

To identify, control and minimize the impact of threats.

• - Major objective is proof of identity.
• Something the user is, has, does, or knows

- Permission issued to individuals and groups to do certain activities with information resources, based on verified identity.

System that enforces access-control policy between two networks.

(also called antivirus software) are software packages that attempt to identify and eliminate viruses, worms, and other malicious software.

are designed to detect all types of malicious network traffic and computer usage that cannot be detected by a firewall.

Process of converting an original message into a form that cannot be read by anyone except the intended receiver.

Process of converting an original message into a form that cannot be read by anyone except the intended receiver.

is a process in which a company identifies the software that it will allow to run and does not try to recognize malware.

is a process in which a company allows all software to run unless it is on the blacklist

located between the two firewalls; the DMZ contains company servers that typically handle Web page requests and e-mail

is an electronic document attached to a file certifying that the file is from the organization that it claims to be from and has not been modified from its original format.

which are trusted intermediaries between two organizations, issue digital certificates.

is a private network that uses a public network (usually the Internet) to connect users

is an encryption standard used for secure transactions such as credit card purchases and online banking.

extend the security perimeter that exists for the organization’s managed devices, to unmanaged, remote devices.

monitor employees’ computers, e-mail activities, and Internet surfing activities

is a fully configured computer facility, with all services, communications links, and physical plant operations.

is eight bits and represents a single character (e.g., a letter, number or symbol).

is a group of logically related characters (e.g., a word, small group of words, or identification number)

is a group of logically related fields (e.g., student in a university database).

is a group of logically related records.

is a group of logically related files.

is a diagram that represents the entities in the database and their relationships.

is a person, place, thing, or event about which information is maintained. A record generally describes an entity.

is a particular characteristic or quality of a particular entity

is a field that uniquely identifies a record.

are other field that have some identifying information but typically do not identify the file with complete accuracy.

which are attributes that are unique to that entity instance

• of an entity class is the representation of a particular entity.
• Entity instances have identifiers

consists of entities, attributes and relationships

is a set of programs that provide users with tools to add, delete, access, and analyze data stored in one location.

is based on the concept of two-dimensional tables

Structured query language allows users to perform complicated searches by using relatively simple statements or keywords.

allows users to fill out a grid or template to construct a sample or description of the data he or she wants.

is a method for analyzing and reducing a relational database to its most streamlined form for

is a repository of historical data organized by subject to support decision makers in the organization.

has three dimensions: customer, product, and time.

typically involves a database, where data from business transactions are processed online as soon as they occur.

involves the analysis of accumulated data by end users (usually in a data warehouse)

is a small data warehouse, designed for the end-user needs in a strategic business unit (SBU) or a department.

is an approach to managing data and information across an entire organization.

is a method that organizations use in data governance.

are a set of core data that span all enterprise information systems.

is a process that helps organizations manipulate important knowledge that is part of the organization’s memory, usually in an unstructured format.

objective, rational, technical knowledge that has been documented. Examples: policies, procedural guides, reports, products, strategies, goals, core competencies

cumulative store of subjective or experiential learning. Examples: experiences, insights, expertise, know-how, trade secrets, understanding, skill sets, and learning

refer to the use of information technologies to systematize, enhance, and expedite intrafirm and interfirm knowledge management.

• nCreate knowledge
• nCapture knowledge
• nRefine knowledge
• nStore knowledge
• nManage knowledge
• nDisseminate knowledge