Essay about Unit 1 Assignment 2

Submitted By stina9
Words: 1180
Pages: 5
Open Document
What does “secure information” really mean? Information that is secure satisfies three main tenets, or properties, of information. If you can ensure these three tenets, you satisfy the requirements of secure information. The three tenets are as follows:
• Availability—Information is accessible by authorized users whenever they request the information.
• Integrity—Only authorized users can change information.
• Confidentiality—Only authorized users can view information.
Internal use only—Information or data shared internally by an organization. While confidential information or data may not be included, communications are not intended to leave the organization.
The User Domain is the weakest link in an IT infrastructure. Anyone responsible for computer security must understand what motivates someone to compromise an organization’s system, applications, or data. A list of the risks and threats commonly found in the User Domain and plans you can use to prevent them.
Risk, Threat, or Vulnerability
Mitigation
Lack of user awareness

Conduct security awareness training, display security awareness posters, insert reminders in banner greetings, and send e-mail reminders to employees.
User apathy toward policies
Conduct annual security awareness training, implement acceptable use policy, update staff manual and handbook, discuss during performance reviews.
Security policy violations

Place employee on probation, review AUP and employee manual, discuss during performance reviews.
User inserts CDs and USB drives with personal photos, music, and videos.
Disable internal CD drives and USB ports. Enable automatic antivirus scans for inserted media drives, files, and e-mail attachments. An antivirus scanning system examines all new files on your computer’s hard drive for viruses. Set up antivirus scanning for e-mails with attachments.
User downloads photos, music, and videos.

Enable content filtering and antivirus scanning for e-mail attachments. Content-filtering network devices are configured to permit or deny specific domain names in accordance with AUP definition.
User destruction of systems, applications, or data
Restrict access for users to only those systems, applications, and data needed to perform their job. Minimize write/delete permissions to the data owner only.
Disgruntled employee attacks the organization or commits sabotage.
Track and monitor abnormal employee behavior, erratic job performance, and use of IT infrastructure during off-hours. Begin IT access control lockout procedures based on AUP monitoring and compliance.
Employee romance gone bad
Track and monitor abnormal employee behavior and use of IT infrastructure during off-hours. Begin IT access control lockout procedures based on AUP monitoring and compliance.
Employee blackmail or extortion

Track and monitor abnormal employee behavior and use of IT infrastructure during off-hours. Enable intrusion detection system/intrusion prevention system (IDS/IPS) monitoring for sensitive employee positions and access. IDS/IPS security appliances examine the IP data streams for inbound and outbound traffic. Alarms and alerts programmed within an IDS/IPS help identify abnormal traffic and can block IP traffic as per policy definition.

Workstation Domain
The Workstation Domain is where most users connect to the IT infrastructure. A workstation can be a desktop computer, laptop computer, or any other device that connects to your network. Other devices might include a personal data assistant (PDA), a smartphone, or a special-purpose terminal. You can find more details about mobile devices in the “Remote Access Domain” section.
The Workstation Domain requires tight security and access controls. This is where users first access systems, applications, and data. The Workstation Domain requires a logon ID and password for access. A list of the risks, threats, and vulnerabilities commonly found in the Workstation Domain, along with ways to protect against them.
Risk, Threat, or
Show More

Related Documents: Essay about Unit 1 Assignment 2

Nt1310 Unit 2 Assignment 1

Jordan Moran Unit 2 – Task 1 Assignment 1 John Handlovic Table of Contents: CPU RAM ROM HDD Motherboard BIOS Power Supply Network Card Graphics Card Fan Heat sink Cooling Controllers IDE EIDE Master Slave Ports USB Parallel Serial Internal System Components CPU The CPU is a component within the PC that works on a list of things to do (instructions). It reads the list of instructions and executes each one in order. A list of instructions that a CPU can read is a piece of software (computer program)…

Words 1965 - Pages 8

Unit 1 Assignment 2 Essay

Unit 1: Assignment 2 (P3, M2) The Election process (P3) To stand for election you must be 21 years of age at least and a British, Commonwealth or republic of Ireland citizen also need to be nominated by at least 10 of the registered electors in the constituency and if you want to stand you must receive authorisation from the party if you don’t then you will be classed as an independent and have to pay £500 which you only get back if you receive over 5 percent of the votes cast There are many selection…

Words 520 - Pages 3

Nt1310 Unit 1 Assignment 2

Assignment 2 Chapter 6 6.1) Sensor is a device that converts or measures physical property or stimulus like pressure, temperature, and force to a convenient form in order to measure stimulus. 6.2) Analog sensor is a device that produces a continuous analog signals like electrical voltage and whose value fluctuates in analogous manner with variables measured. Discrete sensor is a measuring device that produces an output that has only certain values. Discrete sensor is divided into two divisions…

Words 2425 - Pages 10

NT1310 Unit 1 Assignment 2

Technical Professions class. The goal of this project was to analyze a recent technical innovation. My selected topic for the report was to analyze the effectiveness of Black Phone 2’s encryption method in protecting client’s information. AUDIENCE DESCRIPTION: While writing this research report, I kept in mind the 2 different types of readers who would be interested in it. The first type would be a person who is interested in purchasing a new cellphone, but is concerned with how safe their personal…

Words 2232 - Pages 9

Pt1420 Unit 1 Assignment 2

straightforward maths to me. The questions are all straightforward and there are no difficulties or complications and this is the mathematics that is good, for me to teach in a school. FM2 1. Assuming he changes speed halfway through his journey, at his destination the mean speed is 75 km/h. 60+90=150 then half that is 75 2. According to the royal mail website first class stamps are 65p (Royalmail.com) 500 divided by 65 = 7.6923 so for £5 you can buy seven stamps. You can then round it down. 3.If there…

Words 478 - Pages 2

Unit 2 Assignment 1 Essay

Proposal for a Secure Network Architecture This assignment will explore the secure network architecture for a coffee and tea retailer that is frequented by various users in need of an internet connection. The focus of this proposal will be a recommendation of a design for this type of organization while addressing cost and security concerns. Ultimately, I would recommend a Wide Area Network (WAN) for this type of organization. The data shared below is what I took into consideration before arriving…

Words 717 - Pages 3

Nt1310 Unit 1 Assignment 2

In Class Assignment #2 The iPhone 6s has an onscreen keyboard. The HP Envy Laptop has both an onscreen keyboard and a physical built in keyboard. For the HP Envy laptop, using the built in keyboard can be useful. For example, the keyboard is all in one place. The keyboard also has terminal server shortcuts. It also has a window key which can switch between the start screen and the desktop. Windows key and the letter L can help switch accounts. It also has special keyboards that can lower or brighten…

Words 537 - Pages 3

Nt1310 Unit 2 Assignment 1

Constructed Response 2 I plan to gather a team of all principals and selected teachers who will voice concerns about flaws within the present curriculum. A board meeting will be held with them to discuss these concerns. I will have a memo sent out to all principals to hold professional development meetings with their staff to discuss the new and effective curriculum initiative that the superintendent plans to have developed with teacher input. I will ensure that principals must mention that the new…

Words 1384 - Pages 6

Essay about Unit 2 Assignment 1

ISS3340 Windows Security Unit 2 Assignment 1 Recommendations for Access Controls Recommendations for Access Controls Access Control is the defined as “the selective restriction of access to a place or other resource”, in the RFC 4949. “The act of accessing may mean consuming, entering, or using. Permission to access a resource is called authorization.” Simply put the ability to read, write, modify, or deleting information or files is what Access Control is. It is more than this, in the permissions…

Words 400 - Pages 2

NT2580 Unit 2 assignment 1 Essay

Hutchison, John 6/28/15 NT2580 Unit 2: Assignment 1-Window of vulnerability The four parts would be the Discovery-Time, Exploit-Time, Disclosure-Time, and Patch-Time. All four of these must be looked at and evaluated. Discovery Time –is the earliest date that vulnerability is discovered and recognized to pose a security risk. The discovery date is not publicly known until the public disclosure of the respective vulnerability. Exploit Time -is the earliest date an exploit for vulnerability is available…

Words 562 - Pages 3