Francess Gideon

Management 255

October 16th 2018

Case 3

What can be the drawback of having a formal system as mentioned in point 5?

One possible drawback of having a formal system as mentioned in point 5 is inflexibility in

systems planning because having a formal mechanism is having a fixed flow of procedures.

Meaning, certain adjustments or finalizations can’t be made at all due to a fixed and systematized

mechanism, that is performing a meticulous run-through of the systems plan.

B. Can transparency make organizational responsibility more effective?

Indeed. Being transparent means being free from deceit or untruthfulness. The organization is

being open to their organizational responsibilities. This will not only show the integrity of a

certain organization, but also show how ethical the organization is. Therefore, the value of

transparency is highly effective.

 Francess Gideon
Management 255
October 16th 2018

Case 6

A. What security loopholes come to the fore in the situation described? How can these be

plugged?

The security loopholes are: (1) No password change policy/easy to access: SystemX

transmitted all information by email but few computers they had not changed their

default e-mail passwords which were in the username

(2) It’s a big security loophole for the company

(3) Maximum computer doesn’t have updated anti-virus- Antivirus desktop are not

updated

(4) Local mail sever was open but it was running which is risky.

(5) Lack of confidentiality

We can plug these situations by taking following action: By updating all the anti-virus

software, (2) They should take necessary step to change all e-mail passwords which were

not change yet and also take appropriate step about the server.

b. What is the importance of a “security budget” in the context of the given situation?

B. In dealing with information security, the importance of security budget is highlighted

because of security issues. First of all, the reasonableness of the funds available to protect

information is a concept that management takes for granted. Another factor to be assessed

is the contingency of the investment. This criterion relates to the value of information,
which varies over time with variations in the market, company complexity, business

strategy, business drivers, the use of products, and services related to business.