Stefania Moll
CGS3300
Final Exam

1. Information Security Auditing procedures fall into three categories:

- Auditing around the computer- verifying processing by checking for known outputs using specific input.
-Auditing through the computer – the checking of outputs, inputs and processes.
-Auditing with the computer – the use a combination of client data, auditor software and client or auditor hardware.

2. International threats to IS include Espionage or Trespass. This means an unauthorized person is attempting to gain illegal access to the information of firms. Information extortion is when there is a threat to steal information. Sabotage or Vandalism involve defacing a firms website. The theft of equipment and information has become more powerful with the increase of storage. Identity theft is the deliberate assumption of another individual’s information to gain access to their financial information. Intellectual property theft affects individuals earning on income from royalties. Software attacks began in the outbreak era when malicious software infected computers worldwide to now profit driven websites today. Alien software is pestware running on a computer in which the individual has no knowledge of. Supervisory Control and Data Acquis. Refers to a large distributed measurement and control system used to monitor or control chemical, physical, or transport processes. Cyber terrorism and cyber warfare are attacks on computer systems through the Internet to cause physical, real world harm. Unintentional threats to information systems are acts with no malicious intent typically caused by human errors, organizational employees. Social engineering attacks occurs when perpetrators use social skills to trick or manipulate a legitimate employee into providing confidential company information.

3. Physical Access and Communication Controls

4.