tailieunhanh - Microsoft Encyclopedia Of Security Phần 4

An toàn của một hệ thống thông tin thực chất là sự đảm bảo an ninh ở mức độ chấp nhận được. Muốn hệ thống thông tin an toàn thì trước hết phải có sự đảm bảo thông tin trên cơ sở mạng truyền dữ liệu thông suốt. | B Fair Information Practices FIP Standards governing collection and use of personal data. Overview Protection and privacy of personal information is becoming increasingly important as e-commerce grows on the Internet. The concept of Fair Information Practices FIP can be traced back to the Privacy Act of 1974 . legislation designed to protect personal information collected by government agencies. The Organization for Economic Cooperation and Development in Europe incorporated these practices into its Guidelines for the Protection of Personal Data and Transborder Data Flows in 1980 which evolved into the European Union Data Protection Directive in 1995. FIP can be summarized in five basic principles K Notice An agency collecting personal information from individuals must inform these individuals concerning its collection and use practices. K Choice Individuals must be able to determine how collected information should be used. K Access Individuals must be able to view modify and contest the accuracy of personal information collected about them. K Security Agencies collecting personal information must protect such information from unauthorized access. K Enforcement There should be legal mechanisms in place to enforce these practices to ensure their compliance. Other important principles include these K Data integrity Agencies collecting personal information must maintain the integrity of the data collected. K Onward transfer An agency collecting information from individuals must inform these individuals concerning its policies for passing such information on to other agencies. K Remedy Individuals must have avenues of remedy available should they determine that an agency holding personal information about them has misused this information or allowed it to be misused. For More Information The 1998 report Privacy Online A Report to Congress by the Federal Trade Commission outlines the issues and practices surrounding FIP. You can download this report from