ipl-logo

Developing Security Policies, Standards, And Reasoning Paper

782 Words4 Pages

CIS 333 Assignment 1
Prof. Yamaguchi
Donavan Mansfield
Strayer University
13 May 2018

To: ABC Inc.
From: IT Security Officer
CC: Company’s Manager
Date: 05/13/2018
RE: Developing Security Policies, Standards, and Practices of the Company
Business Environment, Risk, and Reasoning
A business environment is defined as the internal and external factors that affect the way in which an organization operates. These factors include management, customers, employees, business regulations, supply, and demand. However, the term ‘business environment' indicates the external institutions, factors and forces are cannot be controlled by business, and they influence how a business enterprise functions. Such factors include the competitors, customers, government, suppliers and the social, legal, political and technological factors (Peltier, 2016). Both the internal and external influences affect business in either a negative or a positive way. Therefore, to control the factors affecting business, a security policy has to be created to control risks that may face an organization such as theft of the company’s products and services.
In every organization, there is need of having a security policy has they help in playing various roles. One of the reasons behind the creation of a security policy in an …show more content…

All locks electronic access cards, keys, and access codes are parts of the Mall's Company and will be issued to every employee depending on their needs to access various areas. Each company’s facility will be locked at all times in a day with exception of when the employees are passing through the facility. No person is supposed to give their key to any another person without permission from the security officer or any other relevant person (Coffee & Henderson, 2015). All electronic cards and keys must be taken back to the company upon termination of an

Show More
Related
131 Words | 1 Pages

1. Policies governing the network insecurities which include Email and communications policy, Remote Access Policy, BYOD Policy and Encryption policy 2. User accounts management through training and assigning of user roles depending on their access levels to information in the organization. 3. Setting up workstations and assigning every user a workstation.

Read More
500 Words | 2 Pages

Assignment-7 Group Policies Group Policies: Group policies specifies settings for users and computers which includes security settings, software installation, computer startup and shut down, registry based policy settings and folder redirection. Group policies are responsible for controlling the working environment of users and computers accounts. It provides the configuration and management of the user’s settings, operating system and applications in a working environment. It is responsible for the user’s actions in a computer like what a user can and cannot do on the computer for example enforce users to have a complex password to prevent the network from being accessed by unidentified users. Group policies when properly planned and implemented

Read More
223 Words | 1 Pages

Employees must access a variety of Licensee’s Information Assets including computers, networks, hardware devices, and third party service provider accounts. Employees who have access to Licensee Information Asset resources are to maintain strong passwords and protect their Information Asset access credentials from unauthorized use. The Information Technology department configures network server domains to meet specific password complexity requirements. These include prohibiting passwords from containing the user account name, temporary passwords forcing the user to change the password during their first login, enforcing password history controls that prohibit the use of the 12 previously used passwords, requiring users to change their passwords every 90 days, and a minimum password length of 8 characters.

Read More
1670 Words | 7 Pages

Marques Underwood INSS 391 Security and the Future With the transition of companies leaning towards advancing through the usage of big data, cybersecurity and the trends in technology are creating an increase in threats. The goal is to protect the databases and devices used at these companies before they are hacked and compromised for unwanted reasons. We’ll see the general concerns with security in the IT field, and steps that specific companies are taking to prevent and adopt to the landscape of the future in security. Devices are increasing at a rapid pace these days, meaning the more data is being expanding.

Read More
744 Words | 3 Pages

Importance of Securing Servers Blake Sallee SEC280: Principles of Information-Systems Security Professor Pratibha Menon 11/06/2014 DeVry University   Importance of Securing Servers The purpose of this paper is to discuss the importance of securing the Windows and UnixLinux server. This will go over the potential threats Windows severs and UnixLinux are subjected to. The paper will also discuss the potential security measures that can be implemented in order to better protect the servers from harm.

Read More
1994 Words | 8 Pages

Overall, the footing for the risk management program is laid during the framing process. When exercising the risk management strategy of NIST SP 800-39, the organization itself must determine the overall approach, and the overall tolerance the organization is willing to accept. During framing, the leadership sets the direction for the organization in an effort to achieve the objectives laid out within the organization’s business plan. To place framing into context, the leadership determines its security strategy before moving forward. To effectively frame the risk management strategy, the organizational leadership is required to identify the methodology used to implement security controls.

Read More
1005 Words | 5 Pages

Q1.a When talking about environment in general, we think of the surrounding things that have an ability to affect. Same is applied with marketing environment. Marketing environment is the collection of all of the surrounding actors and forces that have the power to affect the company 's ability to do its job in having good relationship with target customers and satisfying their needs (Kotler, Armstong, Tolba, Habib, (2011). Marketing environment consists of internal and external factors that have direct affect on the marketing program. Internal factors (or the microenvironment) are the ones closed to the company, for instance, the company, it 's suppliers, the marketing intermediaries, competitors, public and customers.

Read More
913 Words | 4 Pages

For operational purposes, the company collects and stores confidential information about their customers, employees, suppliers, and vendors. For purposes of their rewards program, the company collects sensitive and confidential consumer information. Although security measures and information technology systems have been put in place to ensure secure transmission and storage of confidential information, security breaches, computer viruses, or even human error can occur. Any of these events could cause data to be lost or stolen, as well as disclosed and used with malicious intent. Such occurrence could lead to litigation, fines, increased security costs, and damage to

Read More
993 Words | 4 Pages

Implement a policy where employees must adjust their passwords every sixty days and that they must set a screen lock out when they step away from their workstation 4. True or false: COBIT P09 risk management control objectives focus on assessment and management of IT risk. True 5. What is the name of the organization that defined the COBIT P09 Risk Management Framework?

Read More
641 Words | 3 Pages

This password should only be accessed by members of staff that need to retrieve relevant information relating to a subject or individual. When handling paper documentation, you have to ensure that the documents are filed and locked away in a secure cabinet, within an office that only staff are able to access. 2.3 Describe features of manual and electronic information storage systems that help ensure

Read More
1153 Words | 5 Pages

P8.4. a. Preventive controls such as authentication so anyone trying accessing the system has to provide credentials and verify their identity, encryption so sensitive information cannot be accessed, and have a strong internal environment that educates employees on security measures. Detective controls such as log analysis could be used to show determine if someone is trying to log on to a system and is unsuccessful. Corrective controls such as having an effective CIRT that can access the laptop and block or delete important information so the theft cannot access the laptop.

Read More
2512 Words | 11 Pages

The first step that the auditor should take is to gather as much information about any security procedures and policies that may have been in use following the information collected from the records available. Since each policy may have a different aspect that it works on, the findings from the audit may present evidence that may be vital in identifying the existing procedures or the absence of any policies or procedures. The existence of policies and procedures enables a company to reduce the occurrence or the impacts of a given risk. The lack of such policies may lead to reduced risk management

Read More
811 Words | 4 Pages

Political environment includes laws, government agencies, and pressure group that influence and limit various organizations and individuals in a given society. Economic environment consists of economic factors that affect consumer purchasing power and spending patterns. Social factors include the demographic and cultural aspects of the external macro environment. In which demography is the study of human population in terms of size, density, location, age, gender, race, occupation, and other statistics; cutural environment consist of institution of other forces that affect society’s basic values, perceptions, preferences, and behaviors. Therefore, these factors have an impact on customer’s needs and size of potential markets.

Read More
1394 Words | 6 Pages

Part A Macro environment is important factor affecting the development of enterprises. A macro environment is the condition that exists in the economy as a whole, rather than in a specific sector or region.(Macro Environment n.d.) Cultures, politics, technology, nature, economy and demographic are the six major forces in the company 's macro-environment.(Kotler & Armstrong 2014, p96） Political factors Political factors include government regulations and legal issues and define both formal and informal rules.(PEST Analysis n.d.) All the companies have to follow these rules.

Read More
1022 Words | 5 Pages

Micro Environment consists of factors or elements close to business that have a direct impact on the business operations and success. It also affects the business performance and various other decisions that are critical to business. Some of the micro-environmental factors include customers, employees, distribution channels, suppliers, media and the general public. Macro Environment are the major external and uncontrollable factors that influence an organization 's decision making, and affect its performance and strategies. The macro-environment consists of forces that originate outside of an organization and generally cannot be altered by actions of the organization.

Read More

More about Developing Security Policies, Standards, And Reasoning Paper

Related Topics

Open Document