Introduction: Information Security Policy Essay example

Submitted By NaviFire
Words: 749
Pages: 3
Open Document
Introduction
Student Name: Shelby Hartsell
University of Phoenix
IT/244 Intro to IT Security
Instructor’s Name: Dr. Flores Date: 06/21/2015
1.Introduction
Due in Week One: Give an overview of the company and the security goals to be achieved.
1.1.Company overview
As relates to your selected scenario, give a brief 100- to 200-word overview of the company.
The Bloom Design group offers interior design services to their customers nationwide. They have locations in New York and Los Angeles. The main focal point is their website. On this website, there is a virtual designing tool that gives their customers access to see what their ideas look like in front of them, prior to making ordering decisions. Interior decorators can access these files and the guides from the company with a login. They can also process orders electronically for the materials needed to complete the project. The workforce of the company is remote, and uses a secure VPN to access the network.
1.2.Security policy overview
Of the different types of security policies—program-level, program-framework, Issue-specific, and system-specific—briefly cover which type is appropriate to your selected business scenario and why.
System-specific policy is efficient in adding policies to the website. Due to the specific nature of the business scenario, I feel that going with a system-specific policy will set a good security guideline to all aspects of the website that the Bloom Design uses for their interior design
1.3.Security policy goals
As applies to your selected scenario, explain how the confidentiality, integrity, and availability principles of information security will be addressed by the information security policy.
1.3.1.Confidentiality
Briefly explain how the policy will protect information.
With this policy, we need to make sure that user’s information states safe, as well as easy to access for their interior designer. We do not want other customers or designers having access to information that doesn’t belong to them, so implementing a login for customers could help keep their information secure
1.3.2.Integrity
Give a brief overview of how the policy will provide rules for authentication and verification. Include a description of formal methods and system transactions.
The policy would provide rules with the login in for the customers, a separate login for the designers as well as the VPN mentioned for the workforce. I feel that a simple user name and password, with both capital, lowercase letters and symbols can keep a strong and secure method. Transactions should also be secure, with using a third party program like https://escrow.com/ or an option to PayPal’s services where they secure the customer’s payment information but it also doesn’t save their information on our website in case there is a possibility of a breach. A confirmation should be sent to the customer as well as an access to track and locate their order history,
Show More

Related Documents: Introduction: Information Security Policy Essay example

Audience-Focused Communication Essay

Axia College Material Appendix C Introduction Student Name: Jeremiah Binning Axia College IT/244 Intro to IT Security Instructor’s Name: James W. Lemaster Date: September 21, 2012 1. Introduction 1.1. Company overview The Bloom Design Group sets itself apart from other interior design companies by having a comprehensive, interactive online virtual decorating tool, which allows clients the ability to design their own color and designs schemes. Not only does this save a great…

Words 723 - Pages 3

Essay on Information Technologies Acts

Information Technologies Acts Introduction to Computer Applications and Systems Information Technologies Acts There are a number of information technologies acts that have been passed over the years in an attempt to assist in protecting the consumer, business, and government within the United States from crimes that may be committed with the use of and misuse of information systems. Do Not Call Implementation Act of 2003 The Do Not Call Implementation Act of 2003 authorized the Federal…

Words 489 - Pages 2

Research Paper On Security Policy

Policy paper Table of contents Abstract……………………………………………………………………………………….. (3) Introduction…………………………………………………………………………………... (4) Conclusion……………………………………………………………………………………. (10) References……………………………………………………………………………………. (11) Abstract Policies are a set of requirements or rules which are required to set a path to a specific objective. Security policies should balance access and security. Security policies should minimize risk while not imposing undue…

Words 2117 - Pages 9

Essay about Financial Markets

Class Time: 9:30-10:20am MWF Classroom: BEC 1845 Course Objectives: The purpose of this course is to provide a practical introduction to today’s changing landscape of financial markets and institutions. On one hand we will discuss the characteristics of instruments used in the financial markets to facilitate the flow of funds and information production process through security trading and financial intermediation (functional perspective). On the other hand, we will talk about the structure of financial…

Words 1091 - Pages 5

Good Quality Implementing And Managing Network Security

Implementing and Managing Network Security John Smith CIS -125 Telecommunication Concepts Prof. Summer 2010 ASA College, New York Table of Content Introduction………………………………………….page 3 Security Principles………………………………......page 4 Managing Security……………………... ………..... page 5 Management Support Effective Security …………...page 6 Intrusion Detection ………………………………….page 7 Window Security…………………………………… page 8 Web Security……………………………………...... page 9 Security policy …………..................…

Words 2302 - Pages 10

Essay about Wgu Mmt2 It Strategic Solutions All 4 Tasks

any future expansion location to a private cloud by leveraging MPLS. It would establish loop-free routes and share routing information among the group of routers. MMT2 IT Strategic Solution Task 2 Task 2 Introduction: Read the attached “AEnergy Company Case Study” before completing this task. Scenario: AEnergy Company has current…

Words 2817 - Pages 12

Student Essay

John Moura Chapter 1 – Introduction to the Management of Information Security Review Questions 1. A globally interconnected commercial world has emerged from the technical advances that created the Internet. Has its creation increased or decreased the need for organizations to maintain secure operation of their systems? Why? Answer: As Internet use continues to rise, the amount of “malicious entities” is also rising. As “malicious entities” grow and become more numerous, the…

Words 1125 - Pages 5

Essay on E-mail and Richman Investments Business

Acceptable Use Policy Paul Elander ITT Technical Institute Per Hatlevik Introduction to Information Security – NT2580 7/24/2015 Acceptable Use Policy 1. Overview InfoSec’s intentions for publishing an Acceptable Use Policy are not to impose restrictions that are contrary to Richman Investments’ established culture of openness, trust and integrity. Infosec is committed to protecting Richman Investments’ employees, partners and the company from illegal or damaging actions by individuals, either knowingly…

Words 1961 - Pages 8

Student: Information Security Essay

Guide for the Role and Responsibilities of an Information Security Officer Within State Government April 2008 Table of Contents Introduction _________________________________________________________________ 3 The ISO in State Government ___________________________________________________ 4 Successful ISOs – Necessary Skills and Abilities ____________________________________ 7 Twelve Components of an Effect ive Information Security Program _____________________ 9 The ISO Role and…

Words 6593 - Pages 27

HIPAA Breach Notification Report

INTRODUCTION: Calamity and security occurrences debilitate the capacity of associations to do its mission and operational capacities arranging and arrangement permits associations to keep on serving its group. The security and privacy of patient wellbeing data is a principal obligation of social insurance associations. (Wilson,2006). Patients believe their individual and private wellbeing data to health awareness associations with the desire of insurance and privacy. Human services…

Words 947 - Pages 4