c) Discuss the THREE (3) most important tools and technology for safeguarding information resources

i)Firewall
it is combination of hardware and software that prevents unauthorized users from accessing private networks

ii)Intrusion detection systems
it monitors hot spots on corporate networks to detect and deter intruders. it also examines events as they are happening to discover attacks in progress

iii)antivirus and antispyware software
it checks  computers  for presence of malware and can often eliminate it as well ad it also require continual updating

Trust is an essential element of customer relationship. Computer crime can damage business' reputation and erode the trust that customers have for the organization. This could potentially lead to loss of customer, loss of sales and reduction in profits

The effect of reputational damage can even impact on suppliers, or affect relationships with partners, investors and other third parties vested in the business.

 
ii) Legal consequences of computer crime

Data protection and privacy laws require organizations to manage the security of all personal data they hold whether on the staff or their customers. If this data is accidentally or deliberately compromised, and they have failed to deploy appropriate security measures, they may face fines and regulatory sanctions.

2. Who poses the biggest security threat: insiders or outsiders?

Insiders is the person who poses the biggest security threat because the insiders have the knowledge about the security of an organization. one of the things that the insiders to is hacking the security because they know better the flow of the organization compared to the outsiders. this is because the insiders have already entrusted with authorized access to at least some systems and applications on a corporate network. It can be very hard for those in IT to decipher whether he’s just performing his regular job tasks, or carrying out something sinister. An angry employee who already has access to company files could be secretly leaking documents to competitors, or he could be sabotaging systems or corrupting data because he is miffed at his employer.

3. Suppose your business had an e-commerce Web site where it sold goods and accepted credit card payments. Discuss the major security threats to this Web site and their potential impact. What can be done to minimize these threats?

 Malware which is the malicious software that attackers insert into the web files or pages once they have gained access to the site. Malware may be found on an individual’s computer if they have themselves fallen victim to a phishing attack or otherwise been compromised, or it may be inserted directly onto the website after a successful SQL injection or if administrative account access has been granted to a harmful entity. As with software, malware can perform an extremely wide range of activities, from turning the computer into a botnet that can be part of a DDoS attack, to stealing credit card and account information from the website users. One type of malware that targeted Magento site was able to take credit card information and store it in images so that the attacker could easily access it without flags being raised. In order to minimize these threats, ones need to update the computer operating systems and patch regularly in order to defend against malware and phishing. This will help prevent vulnerabilities from being exploited and help detect and block threats from entering the system. 

the solution that available for this problem is by working through the existing global security framework. NATO allies, for example, could collaborate by sharing forensic intelligence from cyberattacks and building better detection and response techniques. Separately, countries could create international working groups to discuss how to react to attacks and what to do in the days or weeks before we know where they came from. It’s unrealistic to expect that any single country will unilaterally disarm its cyberarsenals while the threats remains. But governments could begin to discuss what constitutes a reasonable response when one state is attacked by another in cyberspace.

The process needs to be transparent; an effective framework to govern international behavior cannot be created or administered in secret. Since most cyberwar is conducted covertly, governments avoid any public acknowledgment of their own abilities and shy away from engaging in any sort of “cyberdiplomacy.” Statecraft conducted in secret fails to create public norms for deterrence.