Chapter 8, Problem 1IQ

Program Plan Intro

System vulnerability:

• When huge data amounts are been kept in electronic form, it becomes susceptible to many threats.
• The information systems in many locations are been interconnected through communication networks.
• The unauthorized access can occur at many access points in network and is not limited to single location.
• The data flowing over networks could be accessed; valuable information could be stolen while transmission or data could be altered without authorization.
• The denial-of-service attacks are launched by intruders to disrupt website operations.
• Internets are vulnerable than internal networks as it is open to everyone.

Explanation of Solution

Authentication and Identity management:

• The Identity management (ID management) denotes an organizational process to identify, authenticate and authorize individuals to have access to information.
• The information includes applications, networks with user rights and other company information.
• It includes authenticating of users and to determine whether they are allowed access to particular system.
• It determines whether a user has access to systems but also sets access level and permission level for users.
• It includes control over process of authorizing system or network permissions for existing users.
• It includes off boarding of users who are no longer authorized for access to organization system.
• Authentication denotes a process of recognizing identity of a user.
• It denotes a method to associate an inbound request with identifying credential set.
• The credentials delivered are compared with values of file in a database of authorized information of user within authentication server.
• It has two different phases, identification as well as actual authentication.
• The identification phase would provide a user identity to security system.
• This identity is been provided in form of a user ID.

Working with IT security systems:

• Yes, have worked with IT security systems and identity management.
• The job nature was to ensure proper working of systems in an organization.

Nature of work with software:

• The job nature was to ensure proper working of systems in an organization.
• The proper updating of virus protection software and system updates was a responsibility.
• The scheduled back up schemes is to be controlled and managed.
• To ensure proper working of software present in organization.
• To ensure credentials provided by user matches with that of access file database.