Internal Use Only
Richman Investments "Internal Use Only" Data Classification Standard
The "Internal Use Only" data classification standard at Richman Investments will include system infrastructure to include the User Domain, Workstation Domain, and the LAN Domain. This standard will cover all user access and their workstations, as well their access to internet websites and company databases and any information in between. Below is a description of each domain standard:
User Domain: This Domain is where only one user will have access. This can be configured for internal use only. By default, the IT department will maintain the security for this, so that only the IT Department can grant remote access privileges. The User Domain will enforce an acceptable use policy (AUP) to define what each user can and cannot do with any company data that they have access to. Every user within the company is responsible for the security of the environment. Violation of the AUP can be grounds for immediate dismissal and/or legal actions.
Workstation Domain: The Workstation domain is the second layer of the infrastructure that “Internal use only” standard covers. The Workstation Domain is where users first access the systems, applications, and data. This layer requires a login and password authentication before access is allowed to view information because unauthorized access can infect the workstation with viruses. Richman Investments IT Department will provide secure access for the employee workstations with a username and password. A security protocol requires the password to be changed every 60 days. All computers maintain regular updates and continuous antivirus protection for monitoring. Additionally, no personal devices are allowed on the network.
LAN Domain: The Local Area Network (LAN) Domain is a group of computers all connected to a LAN domain server(s). The LAN Domain is a collection of computers connected to one another or to a common medium. All LAN domains include data
The "Internal Use Only" data classification standard at Richman Investments will include system infrastructure to include the User Domain, Workstation Domain, and the LAN Domain. This standard will cover all user access and their workstations, as well their access to internet websites and company databases and any information in between. Below is a description of each domain standard:
User Domain: This Domain is where only one user will have access. This can be configured for internal use only. By default, the IT department will maintain the security for this, so that only the IT Department can grant remote access privileges. The User Domain will enforce an acceptable use policy (AUP) to define what each user can and cannot do with any company data that they have access to. Every user within the company is responsible for the security of the environment. Violation of the AUP can be grounds for immediate dismissal and/or legal actions.
Workstation Domain: The Workstation domain is the second layer of the infrastructure that “Internal use only” standard covers. The Workstation Domain is where users first access the systems, applications, and data. This layer requires a login and password authentication before access is allowed to view information because unauthorized access can infect the workstation with viruses. Richman Investments IT Department will provide secure access for the employee workstations with a username and password. A security protocol requires the password to be changed every 60 days. All computers maintain regular updates and continuous antivirus protection for monitoring. Additionally, no personal devices are allowed on the network.
LAN Domain: The Local Area Network (LAN) Domain is a group of computers all connected to a LAN domain server(s). The LAN Domain is a collection of computers connected to one another or to a common medium. All LAN domains include data
Cited: Book 1. Kim and Solomon, “: The Need for Information Security,” pgs 13-36 in Fundamentals of Information Systems Security, 2nd ed. David Kim & Michael G. Solomon et al. (Jones & Bartlett Learning - Burlington, MA 01803). Online 2. Jones & Bartlett Learning: http://www.ccahs.net/Fundamentals.U1.pdf page 13