Part1: When customers can not access AIS applications, it is a big problem. Imagine customers being unable to buy merchandise from Amazon during the holidays. Imagine students being unable to register and pay for classes during registration time. These are examples of why firms require that their AIS applications retain high availability for use (greater than 99.9%), meaning that these systems will hardly ever suffer an outage. Is this a fair demand for a firm and its customers to accept a much lower availability, such as 80%?  To support your response, perform a search on the Internet or via UMGC's online library to find an article that supports your recommendation (excluding the readings from this class). Be sure to include (a) the title of the article; (b) a link to it; and (c) a two-sentence summary of the article. After completing this conference activity, wait a few days to review your classmates' responses and provide some feedback to at least one of your classmates. Part2: Based upon the material covered from the readings and/or videos from Week 7, highlight the three most important concepts you learned this week and how each of these concepts will help you in appreciating the power of AIS. Be sure to include examples in your postings.  NOTE: You should first identify the concepts that you learned and then describe how they increased your appreciation and understanding of AIS. Part 2 classmate for response Sanjay: E-commerce or AIS sites are the online platforms provided by most of the companies where customer can buy and sell goods and services. The trend of online purchase has seen an exponential growth specially during pandemic years, but this has also highlighted the weakness and vulnerability of these platform. Both bigger and smaller companies have reported outages and downtime. There is no doubt that companies should ensure 99.99% availability of these platforms, and to do that they need have system that monitor, forecast and take steps to prevent outages and downtimes. There can be many reasons for downtime, from server been overworked, technological breakdown, cyber-attacks and issues with payment or billing system. As more and more customers using these E-commerce/AIS platforms to buy goods and services, companies must build a system that assess and forecast outage risks, implement process and policies to prevent risks and steps to mitigative risk damages https://www.forbes.com/sites/forbesbusinesscouncil/2020/06/19/how-to-minimize-the-chances-of-your-e-commerce-site-going-down/?sh=63d4e57a6e16 Shinequah: Three important concepts that I learned this week are "CRUD" Authority Levels, Computer Abuse Technologies and the PRISM Decision Model. "CRUD" stands for create, read, update and delete. I think that this is a great way of determining who has access to a system and staying on top of controls. This is a role-based access approach, and it is mainly through the general ledger. This approach helps in minimizing threats and any other fraudulent activities. Computer Abuse Technologies stood out to me the most out of the three. Before this assignment, I have never heard of any of the terms used before. To be brief, the trap door and worm features intrigues me. The trap door feature is understandable; however, a lot of people lack integrity, and it makes me wonder how many times this feature has been misused to scam or steal information. This urges me to be extra cautious when allowing anyone in my computer to scan for viruses or even third-party applications. The worm feature being able to replicate itself and deny access to resources is completely insane to me. This is just another thing to look out for and encourages me to get better protection on my devices and Wi-Fi network. PRISM stands for prioritize, resource, implement, standardize and monitor. Risks in this framework are categorized due to high priority and techniques are developed to quantify the chances of compromission. Resources are funded and implementation tactics are developed and utilized. With this new knowledge is incorporated in standing operating procedures (SOP's) PRISM and that is events are being monitored. The PRISM aligns with the NIST Cyber Framework, the difference between the two is that the PRISM is "the how" (process) and the NIST is "the what" (outcomes). I think both frameworks are genius, and it creates a sense of structure and flowing foundation with less room for errors.