For this week's discussion you can either pick an organization you have been part of (as an employee, volunteer, student, customer, etc.) or research an organization that you're interested in....

For this week's discussion you can either pick an organization you have been part of (as an employee, volunteer, student, customer, etc.) or research an organization that you're interested in. Identify the organization and discuss the following:

• What type of organization is this and what kind of data does the organization need to protect?


• If you have an account (or will have an account) with this organization, describe how the authorization is controlled. How many factors are used to authorize access? What kind of factors are they? What are the risks and benefits of the approach currently used? Could the organization do better in the area of authentication?


• Once a user has authenticated into the system, what kind of access might they have? What approach do you think the organization is using to control access and why?


• What kind of data does the organization have to protect? If they are using cryptography, what is the main purpose- data protection or verification of authenticity? Why?

For this week's discussion you can either pick an organization you have been part of (as an employee, volunteer, student, customer, etc.) or research an organization that you're interested in. Identify the organization and discuss the following: What type of organization is this and what kind of data does the organization need to protect? If you have an account (or will have an account) with this organization, describe how the authorization is controlled. How many factors are used to authorize access? What kind of factors are they? What are the risks and benefits of the approach currently used? Could the organization do better in the area of authentication? Once a user has authenticated into the system, what kind of access might they have? What approach do you think the organization is using to control access and why? What kind of data does the organization have to protect? If they are using cryptography, what is the main purpose- data protection or verification of authenticity? Why?