Practice questions for group discussion

Chapter 14:

1.Imagine I am in charge of IT security for a company. How would you plan for a natural disaster that rendered the building and servers inoperable? Where would you store backups? What would be your plan for recovering normal operations?

Chapter 15:

2. If SQL injection is so simple to do, what mechanisms can you think of to prevent it? Would you change the programming code? Use a firewall?

Chapter 16:

1. Explain and provide an example of Chain of Custody as it relates to Information Technology.

Chapter 17:

2. When discussing cyber-terrorism, scenarios typically focus on the financial industry, envisioning attacks on bank networks or stock exchanges. But many other organizations could be damaged in a cyber attack, and the harm could affect huge numbers of people. List SEVERAL potential targets outside the financial community and discuss the damage that could result if those targets were attacked in an organized, concerted manner.