q. The inability to unilaterally deny having created a document or file or having agreed to perform a transaction. r. Software that limits what actions (read, copy, print, etc.) that users granted access to a file or document can perform. 9.2 Cost-effective controls to provide confidentiality require valuing the information that is to be protected. This involves classifying information into discrete categories. Propose a minimal classification scheme that could be used by any business, and provide examples of the type of information that would fall into each of those categories. There is no single correct solution for this problem. Student responses will vary depending on their experience with various businesses. One minimal classification scheme could be highly confidential or top-secret, confidential or internal only, and public. The following table lists some examples of items that could fall into each basic category. Highly Confidential Confidential (Top Secret) (Internal) Public Research Data Payroll Financial Statements Product Development Cost of Capital Security and Exchange Data Commission Filings Proprietary Manufacturing Tax data Marketing Information Processes Proprietary Business Manufacturing Cost Product Specification Data Processes Data Competitive Bidding Data Financial Projections Earnings Announcement Data 9.3 Download a hash calculator that can create hashes for both and text input. Use it to create SHA-256 (or any other hash algorithm your instructor assigns) hashes for the following: a. A document that contains this text: You earned an A+” “Congratulations! b. A document that contains this text: You earned an A-” “Congratulations! c. A document that contains this text: You earned an a-” “Congratulations! d. A document that contains this text: You earned an A+” (this “Congratulations! message contains two spaces between the exclamation point and the capital letter Y).
q. The inability to unilaterally deny having created a document or file or having agreed to perform a transaction. r. Software that limits what actions (read, copy, print, etc.) that users granted access to a file or document can perform. 9.2 Cost-effective controls to provide confidentiality require valuing the information that is to be protected. This involves classifying information into discrete categories. Propose a minimal classification scheme that could be used by any business, and provide examples of the type of information that would fall into each of those categories. There is no single correct solution for this problem. Student responses will vary depending on their experience with various businesses. One minimal classification scheme could be highly confidential or top-secret, confidential or internal only, and public. The following table lists some examples of items that could fall into each basic category. Highly Confidential (Top Secret) Confidential (Internal) Public Research Data Payroll Financial Statements Product Development Data Cost of Capital Security and Exchange Commission Filings Proprietary Manufacturing Processes Tax data Marketing Information Proprietary Business Processes Manufacturing Cost Data Product Specification Data Competitive Bidding Data Financial Projections Earnings Announcement Data 9.3 Download a hash calculator that can create hashes for both and text input. Use it to create SHA-256 (or any other hash algorithm your instructor assigns) hashes for the following: a. A document that contains this text: “Congratulations! You earned an A+” b. A document that contains this text: “Congratulations! You earned an A-” c. A document that contains this text: “Congratulations! You earned an a-” d. A document that contains this text: “Congratulations! You earned an A+” (this message contains two spaces between the exclamation point and the capital letter Y).
rais12_SM_Ch09.docx