Human Behavior a Factor in Assuring Reliable

¶ … human behavior a factor in assuring reliable protection? Because even the most robust and advanced system is not going to work reliability or effectively if the administrators and/or users do not operate and administer it effectively and/or do not know how. Either people know or they do not know and if they do know, the question is do they/will they? Why is proper understanding so important to effective information security? Because knowing a rule is one thing.

However, understanding why it is necessary and proper is yet another. Knowing why things can or must be done a certain way is important in reinforcing why the procedure is called for or necessary. How are levels of advanced knowledge reached? Why is a capability hierarchy necessary? Advanced levels of knowledge can only be effectively reached when lower levels are already learned and firmly in place. A hierarchy is necessary because not unlike a project management trek, one task can (or should/must) precede the other.

For example, one would need to know how to open the hood of a car before trying to learn anything about rebuilding an engine. 4. Differentiate awareness from training and then from education. Awareness is simply knowing what is going on around you and why. Training is the context of how to react and when. Education is the "book smarts" end of things. All three are necessary to know as knowing what to do, when to do it and how to do it are all important yet separate things entirely. 5.

Why is it necessary to consider information states when developing an IA solution? Because the state of the information will necessarily lead to the level of care and service that will be necessary. Whether something is on a flash/USB drive, a diskette, a DVD, a Blu-Ray Disk, a cloud drive (e.g. Google Drive, etc.) and so on, the state and position of the information will dictate how it would or should be handled from an information assurance perspective. 6.

What is the difference between encyclopedic knowledge and process knowledge? How do those two apply? Basically an IT-speak way of saying street smarts vs. book smarts. Knowing how something works conceptually and in theory (encyclopedic knowledge) is one thing but knowing how to deal with a certain system and in certain ways would require process knowledge. 7. What is the usefulness of a disciplined approach? It ensures that the proper due diligence and considerations are undertaken before decisions are made and mistakes are made.

This does not ensure that no problems will come up, but it does greatly reduce the chances of things going terribly wrong. 8. What is the primary human factor that influences the degree of discipline practiced? In general, it would be the totality of encyclopedia/process knowledge.