Activity #2

Individual (70pts)

1. Why is information security a management problem? What can management do

that technology cannot?
2. Why is data the most important asset an organization possesses? What other
assets in the organization require protection?
3. Why do employees constitute one of the greatest threats to information security?
4. What measures can individuals take to protect against shoulder surfing?
5. What are the various types of malwares? How do worms differ from viruses? Do
Trojan horses carry viruses or worms?
6. How does technological obsolescence constitute a threat to information security?
How can an organization protect against it?
7. Does the intellectual property owned by an organization usually have value? If
so, how can attackers threaten that value?

Group (80pts)

Case Analysis

Skyline Express Photography offers a wide range of aerial photographic, video and
infrared imaging services. The company has grown from its early days of snapping
pictures of client houses to its status as a full-service aerial image specialist. Skyline
contracts with various governmental agencies for aerial mapping and surveying
work. Skyline has its offices at the NAIA Terminal 2 where its fleet of specially
equipped aircraft are hangered. Skyline contracts with several freelance pilots and
photographers for some of its aerial work and also employs several full-time pilots
and photographers.

The owners of Skyline Express Photography recently contracted with a systems

development consulting firm to develop a new information system for the business.
As the number of contracts, aircraft flights, pilots and photographers increased, the
company had trouble keeping accurate records of its business activity and the
utilization of its fleet aircraft. The new system will require all pilots and photographers
to swipe and ID badge through a reader at the beginning and conclusion of each
photo flight, along with recording information about the aircraft used and the client
served on that flight. These records would be reconciled against the actual aircraft
utilization logs maintained and recorded by the hangar personnel.

The office staff was eagerly awaiting the installation of the new system. Their
general attitude was that the system would reduce the number of problems and
errors that they encountered and would make their work easier. The pilots,
photographers and hangar staff were less enthusiastic, being unaccustomed to
having their activities monitored in these ways.

A. Discuss the factors that may inhibit the acceptance of the new system by the
pilots, photographers, and hangar staff.
B. Discuss how an informational strategy could be used to motivate adoption of the
new system at Skyline Express Photography.
C. Discuss how a political strategy could be used to motivate adoption of the new
system.
D. What will be the functions of Skyline Express Photography owners in the
implementing the new system? Explain each.
E. What are the possible threats that may affect the usual operations of the
company while executing the new system? Discuss them.
F. What are the effects of the new system to their staff? Explain.
G. Do the owners of Skyline Express Photography need to employ new staff for the
new system to fulfill the satisfaction of both staff and their clients? Why?