You must show your work on all problems. You may type your answer right into this document. Total points for project: 45 points. Projects must be submitted as a Microsoft Word document and uploaded to the Dropbox for Unit 1. All Projects are due by Tuesday at 11:59 PM ET of the assigned Unit. NOTE: Project problems should not be posted to the Discussion threads. Questions on the project problems should be addressed to the instructor by sending an email or by attending office hours. You will be able to come back to the Dropbox and view your graded work or in the Gradebook after your instructor evaluates it.…
Finally, the system/application domain would require virtual testing of everything before any implementation, hardening of all servers, and keeping up with patches and updates regularly after testing has been completed. Some of the more efficient ways to implement better access controls in a company would start with the proper level of authorization policies including physical controls for facilities. The authorization policy would appropriate entry system access controls that specify what areas are to be locked at all times and what type of locking mechanism should be implemented. It would also include the implementation of secondary locks on specific equipment and storage cabinets…
Describe the policies for securing the facilities and the policies of securing the information systems. Outline the controls needed for each category as relates to your selected scenario.…
Five doctor offices have decided to join each of their buildings to a network. With this, each office will have access to each of the other four offices’ information. This would greatly benefit them and their patients, allowing them to pull up a patient’s medical and billing information from a central server for easy access. However the central, east and west offices are each on their own LAN. The three LANs are similar in design for connecting each workstation and for hardware and software. The eastern and western offices have already been in a partnership with their own peer-to-peer with remote access network along with shared billing and insurance management software. The north and south locations are running standalone workstations that are various ages. Each office has no kind of network compatible hardware and runs the billing and insurance software on one dedicated computer, each with its own attached printer. Patient information is stored on several computers throughout the offices and patient records are filed manually on paper.…
ACME Manufacturing will best benefit from a Wide Area Network by the use of a VOIP. ACME currently has a headquarter in Atlanta that has a corporate operation, accounting, marketing, and an administrative staff. They also have a sales office and engineering office in Atlanta as well. In Chicago, New York, and Phoenix they have their distribution office. I find that ACME will benefit from subnets, routers, packaging, and VLAN’s and security to make sure that the WAN network is successful for WAN network…
This report gives a brief description the general security solutions planned for the safety of data and information that belongs to the organization. The outline will provide elements of a multi-layered security plan, and will indicate a general security solution for each of the seven domains of a typical IT infrastructure. Also I will describe a layer of security for each of the seven domains.…
Conducting annual security training for the user in the user domain will cover the Acceptable Use Policy (AUP). Informing the users will be of what is acceptable and unacceptable use of the system. This layer also needs constant monitoring.…
P. A. Loscocco, S. D. Smalley, P. A. Muckelbauer, R. C. Taylor, S. J. Turner, and J. F. Farrell. The Inevitability of Failure: The Flawed Assumption of Security in Modern Computing Environments. In Proceedings of the 21st National Information Systems Security Conference, pages 303–314, Oct. 1998.…
b. Information security is necessary for protecting confidentiality, privacy, integrity of processing, and availability of information resources. (Correct. As Figure 8-2 shows, security is the foundation for achieving the other four components of system reliability.)…
There are many precautions that can be taken to protect IT systems and data. These are as simple as:…
I believe that blackberry needs to take a longer view that will eventually help the developing nations in the Middle East and Asia increase the freedom their citizens have. Until than they should strongly cater to those entities that will benefit the most from high security, Corporations and Governments. At this time, the blackberry Phones are not very popular anywhere in the world and their market share of mobile devices is decreased to the point that they hold less than 1% of the market in the United States. However, our top government officials still use BlackBerry phones because of the strong encryption keys. (Based on my personal experience at work). Strategically Blackberry need to use the NSA debacle as a selling point along with other personal information leaks to push new BlackBerry products into the market.…
It has come to my attention that your corporate security policy for the firm is out of date and that it needs to be updated. In my time here as an intern I have reviewed the security policy and revised it to keep up with all of the technological updates going on in the internet world today.…
1. What are some common risks, and vulnerabilities commonly found in the System/Application Domain that must be mitigated with proper security countermeasures?…
| Describe ways to protect hardware, software and data and minimise security riskThere are steps to prevent threats to system and information: access to information sources should be allowed with Username and password/PIN selection. The system set up on password strength; how and when to change passwords (monthly); online identity/profile; Real name, pseudonym; what personal information to include, who can see the information; Respect confidentiality, avoid inappropriate disclosure of…
Security is a compelling concern for business and employees. Employers need to establish that they carry out complete risk assessment and address security issues by implementing required security systems. Physical security system is a fundamental component of an establishment, which protects a several aspects such as building security, theft, vandalism and falsification of records. Therefore, organizations and companies need to highly aware of to protect their physical assets. The foundation of a competent security management can prevents such risk like discovering solutions, authorization, and controlling employee’s activities. As a result, organizations can ensure the safety and protection of employees and property.…