Question

QUESTION 1 (30)

Define, discuss and develop an Information Security Policy with all its elements.

QUESTION 2 (30)

Online payment systems for consumer electronic commerce are still evolving. Online businesses must offer their customers payment options that are safe, convenient, and widely accepted. Discuss some of the online payment methods these businesses offer.

Answer 1

Answer 1:

Defination of Information Security Policy:- An information security policy (ISP) is a set of rules that guide individuals who work with IT assets. In which company can create an information sec urity policy to ensure their employees and other users follow security protocols and procedures. There are eight elements of an Information Security Policy :- 1) Purpose:- First stste the purpose of the policy which may be to : Create an overall approach to information security. Detect and preempt information security breaches such as misuse of networks, data, applications, and computer systems. Maintain the reputation of the organization, and uphold ethical and legal responsibilities. 2) Audience:- Define the audience to whom the information security policy applies. We may also specify which audience are out of the scope of the policy. 3) Information Security Objectives:- It guide our management team to agree on well-defined objectives for strategy and security. Information Security focuses on three main objectives:- Confidentiality:- Only individuals with authorization canshould access data and information assets. Integrity:- Data should be intract, accurate and complete, and IT systems must be kept operational. Availability:- Users should be able to access information or systems when needed. 4) Authority and Access Control Policy:- Hierachical pattern - A senior manager may have the authority to decide what data can be shared and with whom. The security policy may have different terms for a senior managers vs. a junior employee. 5) Data Clasification:- The policy should classify data into categories, which may include "top secret" "Confidential" and "public" .To ensure that sensitive data cannot be accessed by individuals with lower clearance levels.To protect highly important data, and avoid needless security measures for unimportant data. 6) Data Support and Operation:- Data protection regulations- System that store personal data, or other sensitive data, must be protected according to organizational standards, and relevant regulations. Data backup-Encrypt data backup according to industry best practices. Securely store backup media, or move backup to secure cloud storage. Movement of Data- Only transfer data via secure protocols. Encrypt any information copied to portable devices or transmitted across a public network. 7) Security Awareness and Behavior:- Share IT security policies with your staff. Conduct training sessions to inform employees of this security procedures and mechanisms, including data protection measures, access protection measures, and sensitive data classification. Social Engineering, Clean Desk Policy, Acceptable Internet Usage Policy are types of awareness. 8) Responsibilities, Rights, and Duties of Personnel:- Appoint staff to carry out user access reviews, education, change management, incident management, implementation, and periodic update of security policy. Responsibilities should be clearly defined as part of the security policy.

Answer 2:

Online Payment gateways are the Electronic Commerce services that process payment information for websites. Online payment gateways offer two main benefits to eCommerce businesses. 1) They make the checkout process fast and easy. 2) They provide encryption to keep our customer's information secure. There are so many online payment methods are available, Some of the online payment methods are :- 1) Amazon pay:- Amazon is one of the most popular sites across the whole web, and one that almost all our customers will have accounts with already. Adding AMAZON PAY to our store can make it easier for Amazon customers to shop with us without having to key in their payment data . Amazon's payment method works well on mobile devices, offering a seamless experience where it matters most. setting up Amazon Pay button our website with their express integration option can take a matter of minutes. We can use their API, which takes a little longer, but allows us to customize the experience to better fit in with our website.

2) PayPal:- PayPal is one of the biggest and most familiar of all the online payments options. A lot of people who would have an easier time making a purchase on our website if we let them check out with PayPal. The service boasts that it's currently used by over 17 million businesses and that customers who use PayPal to check oput convert at 82% higher rates than with other payment options.

3) Google Pay:- If anyone can complete with PayPal and Amazon pay for market share, it's google. The company now offers their own online payment method, Google Pay. Google says hundreds of million their users already have card information saved to their google accounts, which means providing a Google Pay option offers added convenience for a significant number of people. Google Pay also lets retailers set up loyalty, programs, digital gift cards, and deals for customers so everyone can skip the paper and plastic cards. And Google Pay works with PayPal and Visa checkout for added reach. They don't charge us anything for using the service. It's free for both you and your customers.