Information Systems, Computer Security, Ethics and Social Impact
Domain focus
This section links information systems with security, ethics and social impact. Questions ask you to identify components, threats and controls, and to discuss effects on people and organisations.
Core rules
- An information system has people, hardware, software, data, procedures and networks. Types include transaction processing, management information (MIS), decision support (DSS) and executive information systems.
- Security goals: confidentiality, integrity and availability.
- Threats: viruses attach to files; worms self-replicate across networks; Trojans disguise as useful software; spyware collects data; phishing tricks users into revealing details; ransomware encrypts data for payment.
- Controls: antivirus updates, firewalls, strong passwords and authentication, access rights, encryption, regular backups stored off-site, audit trails and physical locks.
- Ethical issues: privacy, consent, accuracy, copyright, plagiarism, software piracy and acceptable-use policies.
- Social impact: digital divide, job change, cyberbullying, health effects from prolonged use, e-waste and dependence on technology.
- Data-protection principles: collect only necessary data, keep it accurate and secure, use it for the stated purpose and retain it no longer than needed.
Worked example
A school keeps student records in a database. Identify one threat and two controls, explaining how each control helps. Reasoning: unauthorised access threatens confidentiality. Role-based access rights let staff see only the records they need. Regular encrypted backups protect availability and integrity if data is lost or altered. The explanation must link the control to the threat.
Traps
- Saying a firewall removes viruses; it filters network traffic.
- Confusing a worm with a virus: a worm spreads without a host file.
- Treating a backup as useful if it is stored on the same damaged disk.
- Calling copying software “ethical” because it is for school.
- Discussing only advantages and ignoring social costs.