Case Project 9-4 An architectural firm of eight employees, each with a networked desktop computer, wants you to develop a security policy for the company. Management has emphasized that ease of use is paramount, and little time is available for training. Students should separate into small groups, and each group should write a list of questions aimed at getting enough information for developing the policy. After determining the questions, each group should interview another group, with the other group posing as the architectural firm and answering the list of questions. What level of security should the policy reflect? Use one of the templates you found in Case Project 9-2 to develop a policy based on the answers the other group supplies.

Case Project 9-4 An architectural firm of eight employees, each with a networked desktop computer, wants you to develop a security policy for the company. Management has emphasized that ease of use is paramount, and little time is available for training. Students should separate into small groups, and each group should write a list of questions aimed at getting enough information for developing the policy. After determining the questions, each group should interview another group, with the other group posing as the architectural firm and answering the list of questions. What level of security should the policy reflect? Use one of the templates you found in Case Project 9-2 to develop a policy based on the answers the other group supplies.

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter8: Security Management Models

Section: Chapter Questions

Problem 4DQ

See similar textbooks

Similar questions

A security policy is a document that provides employees with clear instructions about acceptable use of company confidential information, explains how the company secures data resources and what it expects of the people who work with this information. Most importantly, the policy is designed with enough flexibility to be amended when necessary. You are working in organization X, and you are supposed to develop an issue-specific security policy, you can pick one issue from Table.1 [1] (In the photos) Your Task is: To develop the different sections of your policy and adequate procedure(s), you can refer to SANS Policy Templates [2]. References: [1] Developing an Information Security Policy: A Case Study Approach, Fayez Hussain Alqahtani. 4th Information Systems International Conference 2017, ISICO 2017, 6-8 November 2017, Bali, Indonesia. [2] https://www.sans.org/information-security-policy/
Why is it important to track the versions of a policy? It is the only way to access the source code for the policy. It is important to show many versions of a policy for compliance. Policies are updated, so it is important to keep track of the version. Management changes frequently, so it is important to record the CISO's name. How is IIHI related to ePHI under the HIPAA Security Rule?ePHIis IIHI IIHI replacesePHIePHI replaces IIHIePHIis not IlHI Why should cybersecurity professionals be aware of the SDLC? It is a way to save money by identifying external resources before beginning a project. It provides a standardized process for all phases of any system development. It is a government mandate that the SDLC be used for development. It is the only way to incorporate security into hardware programming.
To complete this assignment, you will need to do some research and produce a report that addresses the following issues regarding digital fingerprinting: You should concentrate on the following issues: What exactly is Digital Fingerprinting, and why is it employed in the first place? What is the operation of the fingerprinting algorithm? Explain how it works on a fundamental level. To achieve the intended result—either blocking, deleting, or authorizing the use of content—a series of actions must be taken. Fingerprinting, according to several cybersecurity experts, is abusive and exposes users' privacy concerns. Some browsers have included specific methods to prevent browser fingerprinting from occurring. Describe the safeguards used by any of the browsers to protect themselves against fingerprinting. List two common Fingerprinting Algorithms that are used nowadays.
This project requires that you describe an information security environment and discuss 2 threats that exist in that environment. You will discuss the two vulnerabilities that exist and how you are going to mitigate or fix them. Finally, you will discuss the policies, equipment, etc that will be put in place and how it fixed the problem. This should be a real environment and threats, one that exists in real life, but you do not have to be currently part of it. PART 1 This must be at least a ONE PAGE introduction to the environment and the threats. This would describe details of the environment like where it is located, how things are arranged, the current information security setup, the current computer network topology, people, data, hardware, software, what they do if they are a company or organization, the IT department, what are the threats, how they can it be exploited, who can exploit them, are they internal threats, external threats, etc. PART 2 This must be at least a TWO PAGE…
Describe what the GRANT statement means and how it relates to safety. Are there any restrictions on the privileges that may be bestowed upon someone? What steps must be taken before they may be revoked?
Explain what the GRANT statement is and how it pertains to security. What kinds of privileges may be awarded to a person? What procedures are followed in order to revoke them?
List and describe the security cycle steps used for security mnaintenance in your own words. Use the editor to formot your answer
All of the following statements are true in regards to clipping levels except for which one? Activity below a clipping level is considered normal and expected When the clipping level is exceeded, a violation record may be recorded All abnormal activity, including intrusions, will cross a clipping level The use of clipping levels is considered a preventative technical access control method
After planning and installation phase , the next process would be to review audit logs and from time to time tweak security setting, what do you call this phase? * Your answer
1. You've just been hired as a Chief Information Security Officer for a small startup. They've written four applications and just got funding to go live. Before they do so, they realized they've never had a cybersecurity professional, so they've hired you. While there are hundreds of things to do, you are asked to come up with a list of your top TEN (10) items, in a bulleted list, to focus on in the first day or two. These can be questions to ask or actions to take, and aren't meant to be the full solution, but the initial things you'll do to get control of the situation. Provide a NUMBERED LIST of TEN (10) items that is your initial list of priority areas to focus on and potential actions to take. Do not use more than one line per item. Many aswers are correct, so credit is given for coming up with ten good and comprehensive focus areas based on what we've covered in class, in the labs, and in our readings.
Sub:- Cyber security 9 Permissions at the OU level Right Click OU USA and select delegation control to start the wizard. In the wizard select the group staff, select reset user password and force password change at next logon Note: you are doing this at the OU level thus if you had 1000 users this reset would make all 1000 users change there passwords at next logon.
The computer lab of a local college needs a one-page document that it will distribute to its incoming students to increase their security awareness. After reading the information presented in this module and other sources, prepare a document, which should include a 10-item bullet list of the things that students must remember to reduce the risks of using information technology. After reading the information presented in this module and other sources, write a one-page paper about three high-profile companies that faced security breaches in the last two years. Identify two vulnerabilities that enabled hackers to break into these companies’ systems. Denial of service (DoS) is among the security threats that have been on the rise in recent years. After reading the information presented in this module and other sources, write a one-page paper that outlines four recommendations for dealing with this security threat. Cite three U.S. companies that have been among the victims of this security…