San Jose State University IT Security Policies to Help Mitigate Risk Case Questions 1. Which IT assets did you prioritize as critical to administrative or

San Jose State University IT Security Policies to Help Mitigate Risk Case Questions 1. Which IT assets did you prioritize as critical to administrative or student computing?

2. List your top five (5) risk exposures for which you believe this school should have specific riskmitigation strategies.

3. Given the potential risks that you identified, what IT security policies would you recommend that

the school create to help mitigate each of the identified risk exposures you listed in question #2?

4. True or false: FERPA compliance law is about protecting students’ privacy data, including

personal information, grades, and transcripts. The law itself defines a privacy requirement but it

does not specifically address security controls and security countermeasures.

5. Given that student privacy data is typically housed within administrative computers, systems, and

databases, what can you do to mitigate the risk exposure that a student or someone on the student

or school’s network can access these systems?

6. For a school under FERPA compliance law, do you think the administrative computing or student

computing network infrastructure is more important from a business and delivery of education

perspective?

7. The school monitors the use of student social networking on Facebook™, MySpace™, and

Twitter™. What should the school define and implement if it wants to define acceptable and

unacceptable use of school IT assets, Internet, e-mail, and use of personal laptop computers on

the school’s network?

Note:

Text Book: Grama, Joanna Lyn. Legal Issues in Information Security, 2nd ed. Burlington, MA: Jones & Bartlett Learning, 2015

Each question word minimum of 40 words and a maximum of 50 words.

Please check plagiarism