Nine basic controls that ISO27002 recommends should be considered
1. Key storage areas and keyed entrance areas should be sited to avoid access by unauthorized persons and by the public.
2. Buildings that contain information processing facilities should be unobtrusive and give as little indication as possible of their presence or purpose.
3. Office machinery, such as faxes and photocopiers, should be sited within the secure perimeter in such a way that access to more secure rooms is not required.
4. Doors and windows should be locked when the building or room is unattended. External protection, such as burglar bars, should be considered in the context of the risk assessment for ground-floor and any other accessible windows.
- Read more
- 83 reads
Six step for better IT Risk Management
1. Identify the boundaries of what is to be protected.
2. Identify the assets: all the systems necessary for the reception, storage, manipulation and transmission of information within those boundaries and the information assets within those systems.
3. Identify the relationships between these systems, the information assets and the organizational objectives and tasks.
4. Identify criticality: those systems and information assets that are critical to the achievement of organizational objectives and tasks.
- Read more
- 80 reads
Three basic impact of Information Technology to Business and Audit
It has impacted what can be done in business in terms of information and as a business enabler. It has increased the ability to capture, store, analyze, and process tremendous amounts of data and information, which has increased the empowerment of the business decision maker. Technology has also become a primary enabler to various production and service processes. It has become a critical component to business processes. A ere is a residual e. ect in that the increased use of technology has resulted in increased budgets, increased successes and failures, and increased awareness of the need for control.
Technology has significantly impacted the control process. Although control objectives have generally remained constant, except for some that are technology speci. c, technology has altered the way in which systems should be controlled. Safeguarding assets, as a control objective, remains the same whether it is done manually or is automated. However, the manner by which the control objective is met is certainly impacted.
- Read more
- 66 reads
Top Two Data Mining Challenges
1. Development of parallel or high-performance algorithms, theoretical models and data mining techniques.
Distributed data mining algorithms must support the complete data mining process (pre-processing, data mining and post-processing) in a similar way as their centralized versions do. This means that all data mining tasks, including data cleaning, attribute discretization, concept generalization and so on, should be performed in a parallel way.
- Read more
- 65 reads
Three basic process of data mining
1. Data mining tasks
There are many non-trivial tasks involved in the data mining process: these include data pre-processing, rule or model induction, model validation and result presentation.
2. Data volume
Many modern data mining applications are faced with growing volumes (in
bytes) of data to be analysed. Some of the larger data sets comprise millions of entries and
require gigabytes or terabytes of storage.
3. Data complexity
- Read more
- 78 reads
