Assignment 3

For the following Threat Categories, describe which type of Control should be put in place in an organisation. Classify the controls as Administrative, Product or Physical, as well as whether the controls will Prevent, Detect, Correct or Compensate.

Threat Categories

Accidental corruption of information

Loss of intellectual property

Software piracy

Theft of information (hacker)

Theft of information (employee)

Web site defacement

Theft of equipment

Viruses, worms, Trojan horses

Elevation of privilege

Fire/Flood