PART IV
Part 5 Selected Database Issues
Chapter 20 Security and Administration
20.1 Describe a general plan of action for initiating a security policy, elaborating on each stage that
might be undertaken.
First of all, the need for one must be appreciated, and there must be commitment on the part of
20.2 Detail the types of problems associated with microcomputer security and the types of
countermeasures that could be installed against loss.
The data a PC holds may be considerably more valuable than the machine itself. We are
20.3 Discuss the problems associated with microcomputer security, and contrast the measures
required to provide a secure environment with those of a mainframe computing environment.
The problems concern data security and physical security. Problems and precautions in dealing
20.4 Discuss the types of threat that might occur within the general database environment, and
indicate the measures that could be taken to safeguard against them.
The answer should cover the broad categories of theft and fraud, loss of confidentiality, loss of
20.5 Explain the integrity features that a database management system may provide making reference
to the system used, and indicate the disadvantages that arise where they are not available.
20.6 The increasing accessibility of databases on the Internet and intranets requires a reanalysis and
extension of the normal approaches to security. Discuss some of the issues associated with the
database system security in these environments.