Instructor Manual Principle
4 44
s of Information Security, 7th Edition
4 4 4 44 4 4
by Michael E. Whitman
4 4 4
,Instructor Manual 4
Whitman4and4Mattord,4Principles4of4Information4Security47e,4ISBN4978-0-357-50643-
1;4Module41:4Introduction4to4Information4Security
Table of Contents
4 4
Purpose4and4Perspective4of4the4Module....................................................................................... 2
Cengage4Supplements ................................................................................................................ 2
Module4Objectives ....................................................................................................................... 2
Complete4List4of4Module4Activities4and4Assessments ................................................................... 2
Key4Terms................................................................................................................................... 3
What's4New4in4This4Module.......................................................................................................... 4
Module4Outline ............................................................................................................................ 4
Discussion4Questions ................................................................................................................ 15
Suggested4Usage4for4Lab4Activities ........................................................................................... 16
Additional4Activities4and4Assignments ........................................................................................ 17
Additional4Resources................................................................................................................. 17
Cengage4Video4Resources ........................................................................................................................ 17
Internet4Resources................................................................................................................................... 17
Appendix ................................................................................................................................... 18
Grading4Rubrics ....................................................................................................................................... 18
,Purpose and Perspective of the Module
4 4 4 4 4
The4first4module4of4the4course4in4information4security4provides4learners4the4foundational4knowle
dge4to4become4well4versed4in4the4protection4systems4of4any4size4need4within4an4organization4tod
ay.4The4module4begins4with4fundamental4knowledge4of4what4information4security4is4and4the4how4
computer4security4evolved4into4what4we4know4now4as4information4security4today.4Additionally,4le
arners4will4gain4knowledge4on4the4how4information4security4can4be4viewed4either4as4an4art4or4a4sc
ience4and4why4that4is4the4case.
Cengage Supplements 4
The4following4product-
level4supplements4are4available4in4the4Instructor4Resource4Center4and4provide4additional4inform
ation4that4may4help4you4in4preparing4your4course:
PowerPoint4slides
Test4banks,4available4in4Word,4as4LMS-ready4files,4and4on4the4Cognero4platform
MindTap4Educator4Guide
Solution4and4Answer4Guide
This4instructor‘s4manual
Module Objectives
4
The4following4objectives4are4addressed4in4this4module:
1.1 Define4information4security.
1.2 Discuss4the4history4of4computer4security4and4explain4how4it4evolved4into4information4
security.
1.3 Define4key4terms4and4critical4concepts4of4information4security.
1.4 Describe4the4information4security4roles4of4professionals4within4an4organization.
Complete List of Module Activities and Assessments
4 4 4 4 4 4
For4additional4guidance4refer4to4the4MindTap4Educator4Guide.
Module4 PPT4slide Activity/Assessment Duration
Objective
2 Icebreaker:4Interview4Simulation 104minutes
1.1–1.2 19–20 Knowledge4Check4Activity41 24minutes
1.3 34–35 Knowledge4Check4Activity42 24minutes
1.4 39–40 Knowledge4Check4Activity43 24minutes
1.1–1.4 MindTap Module4014Review4Questions 30–404minutes
1.14–41.4 MindTap Module4014Case4Exercises 304minutes
1.14–41.4 MindTap Module4014Exercises 10–304minutes4per
question;41+4hour4pe
r4module
1.14–41.4 MindTap Module4014Security4for4Life 1+4hour
1.14–41.4 MindTap Module4014Quiz 10–154minutes
[return4to4top]
, Key Terms
4
In4order4of4use:
computer4security:4In4the4early4days4of4computers,4this4term4specified4the4protection4of4the4phy
sical4location4and4assets4associated4with4computer4technology4from4outside4threats,4but4it4later4c
ame4to4represent4all4actions4taken4to4protect4computer4systems4from4losses.
security:4A4state4of4being4secure4and4free4from4danger4or4harm4as4well4as4the4actions4taken4to4m
ake4someone4or4something4secure.
information4security:4Protection4of4the4confidentiality,4integrity,4and4availability4of4information4asset
s,4whether4in4storage,4processing,4or4transmission,4via4the4application4of4policy,4education,4training4an
d4awareness,4and4technology.
network4security:4A4subset4of4communications4security;4the4protection4of4voice4and4data4n
etworking4components,4connections,4and4content.
C.I.A.4triad:4The4industry4standard4for4computer4security4since4the4development4of4the4mai
nframe;4the4standard4is4based4on4three4characteristics4that4describe4the4attributes4of4inform
ation4that4are4important4to4protect:4confidentiality,4integrity,4and4availability.
confidentiality:4An4attribute4of4information4that4describes4how4data4is4protected4from4disclosure4
or4exposure4to4unauthorized4individuals4or4systems.
personally4identifiable4information4(PII):4Information4about4a4person‘s4history,4background,4a
nd4attributes4that4can4be4used4to4commit4identity4theft4that4typically4includes4a4person‘s4name,4ad
dress,4Social4Security4number,4family4information,4employment4history,4and4financial4information
.
integrity:4An4attribute4of4information4that4describes4how4data4is4whole,4complete,4and4unco
rrupted.
availability:4An4attribute4of4information4that4describes4how4data4is4accessible4and4correctly4form
atted4for4use4without4interference4or4obstruction.
accuracy:4An4attribute4of4information4that4describes4how4data4is4free4of4errors4and4has4the4value4t
hat4the4user4expects.
authenticity:4An4attribute4of4information4that4describes4how4data4is4genuine4or4original4rather4tha
n4reproduced4or4fabricated.
utility:4An4attribute4of4information4that4describes4how4data4has4value4or4usefulness4for4an4end4purpos
e.
possession:4An4attribute4of4information4that4describes4how4the4data‘s4ownership4or4control4is4legitim
ate4or4authorized.
McCumber4Cube:4A4graphical4representation4of4the4architectural4approach4used4in4computer4a
nd4information4security4that4is4commonly4shown4as4a4cube4composed4of43×3×34cells,4similar4to4a4
Rubik‘s4Cube.
information4system:4The4entire4set4of4software,4hardware,4data,4people,4procedures,4and4
networks4that4enable4the4use4of4information4resources4in4the4organization.
physical4security:4The4protection4of4material4items,4objects,4or4areas4from4unauthorized4access4
and4misuse.
4 44
s of Information Security, 7th Edition
4 4 4 44 4 4
by Michael E. Whitman
4 4 4
,Instructor Manual 4
Whitman4and4Mattord,4Principles4of4Information4Security47e,4ISBN4978-0-357-50643-
1;4Module41:4Introduction4to4Information4Security
Table of Contents
4 4
Purpose4and4Perspective4of4the4Module....................................................................................... 2
Cengage4Supplements ................................................................................................................ 2
Module4Objectives ....................................................................................................................... 2
Complete4List4of4Module4Activities4and4Assessments ................................................................... 2
Key4Terms................................................................................................................................... 3
What's4New4in4This4Module.......................................................................................................... 4
Module4Outline ............................................................................................................................ 4
Discussion4Questions ................................................................................................................ 15
Suggested4Usage4for4Lab4Activities ........................................................................................... 16
Additional4Activities4and4Assignments ........................................................................................ 17
Additional4Resources................................................................................................................. 17
Cengage4Video4Resources ........................................................................................................................ 17
Internet4Resources................................................................................................................................... 17
Appendix ................................................................................................................................... 18
Grading4Rubrics ....................................................................................................................................... 18
,Purpose and Perspective of the Module
4 4 4 4 4
The4first4module4of4the4course4in4information4security4provides4learners4the4foundational4knowle
dge4to4become4well4versed4in4the4protection4systems4of4any4size4need4within4an4organization4tod
ay.4The4module4begins4with4fundamental4knowledge4of4what4information4security4is4and4the4how4
computer4security4evolved4into4what4we4know4now4as4information4security4today.4Additionally,4le
arners4will4gain4knowledge4on4the4how4information4security4can4be4viewed4either4as4an4art4or4a4sc
ience4and4why4that4is4the4case.
Cengage Supplements 4
The4following4product-
level4supplements4are4available4in4the4Instructor4Resource4Center4and4provide4additional4inform
ation4that4may4help4you4in4preparing4your4course:
PowerPoint4slides
Test4banks,4available4in4Word,4as4LMS-ready4files,4and4on4the4Cognero4platform
MindTap4Educator4Guide
Solution4and4Answer4Guide
This4instructor‘s4manual
Module Objectives
4
The4following4objectives4are4addressed4in4this4module:
1.1 Define4information4security.
1.2 Discuss4the4history4of4computer4security4and4explain4how4it4evolved4into4information4
security.
1.3 Define4key4terms4and4critical4concepts4of4information4security.
1.4 Describe4the4information4security4roles4of4professionals4within4an4organization.
Complete List of Module Activities and Assessments
4 4 4 4 4 4
For4additional4guidance4refer4to4the4MindTap4Educator4Guide.
Module4 PPT4slide Activity/Assessment Duration
Objective
2 Icebreaker:4Interview4Simulation 104minutes
1.1–1.2 19–20 Knowledge4Check4Activity41 24minutes
1.3 34–35 Knowledge4Check4Activity42 24minutes
1.4 39–40 Knowledge4Check4Activity43 24minutes
1.1–1.4 MindTap Module4014Review4Questions 30–404minutes
1.14–41.4 MindTap Module4014Case4Exercises 304minutes
1.14–41.4 MindTap Module4014Exercises 10–304minutes4per
question;41+4hour4pe
r4module
1.14–41.4 MindTap Module4014Security4for4Life 1+4hour
1.14–41.4 MindTap Module4014Quiz 10–154minutes
[return4to4top]
, Key Terms
4
In4order4of4use:
computer4security:4In4the4early4days4of4computers,4this4term4specified4the4protection4of4the4phy
sical4location4and4assets4associated4with4computer4technology4from4outside4threats,4but4it4later4c
ame4to4represent4all4actions4taken4to4protect4computer4systems4from4losses.
security:4A4state4of4being4secure4and4free4from4danger4or4harm4as4well4as4the4actions4taken4to4m
ake4someone4or4something4secure.
information4security:4Protection4of4the4confidentiality,4integrity,4and4availability4of4information4asset
s,4whether4in4storage,4processing,4or4transmission,4via4the4application4of4policy,4education,4training4an
d4awareness,4and4technology.
network4security:4A4subset4of4communications4security;4the4protection4of4voice4and4data4n
etworking4components,4connections,4and4content.
C.I.A.4triad:4The4industry4standard4for4computer4security4since4the4development4of4the4mai
nframe;4the4standard4is4based4on4three4characteristics4that4describe4the4attributes4of4inform
ation4that4are4important4to4protect:4confidentiality,4integrity,4and4availability.
confidentiality:4An4attribute4of4information4that4describes4how4data4is4protected4from4disclosure4
or4exposure4to4unauthorized4individuals4or4systems.
personally4identifiable4information4(PII):4Information4about4a4person‘s4history,4background,4a
nd4attributes4that4can4be4used4to4commit4identity4theft4that4typically4includes4a4person‘s4name,4ad
dress,4Social4Security4number,4family4information,4employment4history,4and4financial4information
.
integrity:4An4attribute4of4information4that4describes4how4data4is4whole,4complete,4and4unco
rrupted.
availability:4An4attribute4of4information4that4describes4how4data4is4accessible4and4correctly4form
atted4for4use4without4interference4or4obstruction.
accuracy:4An4attribute4of4information4that4describes4how4data4is4free4of4errors4and4has4the4value4t
hat4the4user4expects.
authenticity:4An4attribute4of4information4that4describes4how4data4is4genuine4or4original4rather4tha
n4reproduced4or4fabricated.
utility:4An4attribute4of4information4that4describes4how4data4has4value4or4usefulness4for4an4end4purpos
e.
possession:4An4attribute4of4information4that4describes4how4the4data‘s4ownership4or4control4is4legitim
ate4or4authorized.
McCumber4Cube:4A4graphical4representation4of4the4architectural4approach4used4in4computer4a
nd4information4security4that4is4commonly4shown4as4a4cube4composed4of43×3×34cells,4similar4to4a4
Rubik‘s4Cube.
information4system:4The4entire4set4of4software,4hardware,4data,4people,4procedures,4and4
networks4that4enable4the4use4of4information4resources4in4the4organization.
physical4security:4The4protection4of4material4items,4objects,4or4areas4from4unauthorized4access4
and4misuse.
