Question

Based on United States General Accounting Office cases, what are some improvements you would suggest to information assurance managers that he or she might embrace to better identify and valuate threats to information? How might a data flow analysis help in this process?

Answer 1

Information Security threats can be many like Software attacks, theft of intellectual property, identity theft, theft of equipment or information, sabotage, and information extortion.

Threat can be anything that can take advantage of a vulnerability to breach security and negatively alter, erase, harm object or objects of interest.

threat to information is an external factor, something that you can’t control, that could negatively impact your business.

You may be thinking, if threats are outside of my control, why should I spend time identifying them? By knowing your threats, you might be able to find a strategy to minimize them, or at least, come up with a plan to handle them in a way that won’t shut down your business. Identifying threats is all about being prepared and taking proactive steps to minimize the hurt.

Coming up with a list of threats can be difficult. These issues don’t spring to mind as easily as your strengths, but there are certain categories that most external threats fall into.

Data analysis for threat

• Economic trends. Examine the economic conditions that impact business information
• Market trends. Think about changing or shrinking market trends.
• Funding changes. Think of donations, grants, or other shifting revenue streams that aren’t within the control
• Political support. If political support is shifting, you’ll want to analyze its impact.
• Government regulations. Think of regulations that are changing that might hurt your business information
• Changing relationships. Consider shifting relationships with vendors, partners, or suppliers.