A Security Plan Policy For An Dod Information Protection From Loss Of Confidentiality, Integrity, And Availability

Formal user access control procedures must be documented, implemented and kept up to date for each application and information system to ensure authorised user access and to prevent unauthorised access. They must cover all stages of the lifecycle of user access, from the initial registration of new users to the final de-registration of users who no longer require access. These must be agreed by IDI. User access rights must be reviewed at regular intervals to ensure that the appropriate rights are still allocated. System administration accounts must only be provided to users that are required to perform system administration tasks.

This directive established the Department of Homeland Security (DHS) policy for the protecting the data center from unauthorized access by preventing personnel who are not authorized to use the resources of the organization from gaining access and potentially causing harm.

The purpose of this paper is to review State of Maryland information security program documentation and to determine the security standards used to create the program in order to protect confidentiality, integrity and availability of agency operations, organizational assets or individuals which is the main agenda of State of Maryland Department of information technology. We will also discuss about other standards that can be useful for the State of Maryland Information technology and compare and contrast the standards.

Among one of the missions of The U.S. Department of Homeland Security is to protect and preserve the security of the Cyberspace in the country. The principal objective of this Security Plan is to give instructions and direction for the Department’s workers and help the Homeland Security to create best practices and strategies in the IT security system.

This security profile of the Department of Veterans Affairs (VA) is based on two documents of public record. The first is the published VA Handbook 6500 (VAH 6500) which defined policy and procedures for systems within the purview of the VA (Department of Veterans Affairs, 2007). The second document is the Federal Information Security Management Act Assessment for FY 20011 commissioned by the VA Office of Inspector General (OIG) and performed by Ernst & Young in accordance with Federal Information Security Management Act (FISMA) guidelines (VA Office of Inspector General, 2012, p. i).

The 9/11 commission clearly identified a problem with communication between the Intelligence Community and State and Local Law Enforcement which resulted in a new edict (from the IRTPA) of Information Sharing yet clearance levels and accesses quickly became an issue in disseminating information to those with a need to know. To help bridge this gap, the Homeland Security Act of 2002 was passed to crate the DHS by bringing 22 under its umbrella with a primary mission of protecting the homeland from terrorism (Blum, 2010). To do so, DHS’s key mission is to collect, analyze, and disseminate key/related information and share it with the IC and nontraditional partners (state/local governments as well as the private sector) (Blum, 2010). Likewise,

I believe Information Security pertains to policies and procedures that prevent data theft of confidential information from illegal access, use, alteration or destroying of this information in all career fields.

The act recognized the importance of information security to the economic and national security interests of the United States. The act requires each federal agency to develop, document, and implement an agency-wide program to provide information security for the information and information systems that support the operations and assets of the agency, including those provided or managed by another agency, contractor, or other source

As government agencies began to realize that their corporate and customer information was not as private and as safe as they had advertised, they called upon The National Institute of Standards and Technology (NIST) to construct a set of guideline to control and protect information security. The growing need to safeguard such information caused agencies, particularly government agencies, to seek assistance collectively to avoid security breach escalations.

Given the ability move from one location to another and still maintain access information systems have now become a necessary evil. Unfortunately, a slew security concerns which must be addressed and mitigated to ensure the three pillars of the CIA triad are maintained. Guided by policy, remote access is granted once authorized users follow the processes established by Army Regulation 25-2, which also covers the encryption standards utilized to establish secure connection.

Information security involves the protection of information regardless of whether it is in digital form, being stored on computers, or in transit over a network. It is a set of strategies for managing the processes, tools, and policies necessary to prevent and detect threats to

The Federal Government needs to create information systems which are more effective shielded systems to protect their assets and resources at home. The foundation of any mandated cybersecurity strategies that secure our nation national security must incorporate worldwide or state local threats whether targeted toward the federal government or the private sector forces. The OPM breach highlighted the insufficient and inconsistence security approaches the federal government has already used in modernizing the existing cybersecurity policies. There is a requirement for the United States government to institute polices that would incorporate and implement new government cybersecurity structures and centralized the protection of their assets to avert future breaches (Source). Examining the inadequacies in the current national cybersecurity policies and regulations is disappointing as OPM choice to implement these mechanisms and the current authoritative propositions to cybersecurity must change immediately. It was reported that OPM only spent $2 million in 2015 to avert pernicious digital assaults, while the Department of Agriculture spent $39 million. The Department of Commerce, Department of Education, and Department of Labor likewise invested more money in cybersecurity resources than the Office of Personnel Management. The Small Business Administration devoted a similar amount into cybersecurity to recognizing, examining, and alleviate any cyber breaches as OPM, however

The guiding security principles in the scenario are geared to protect its assets. The of its assets are information and data. The CIA triad of Confidentiality, Integrity and Availability which is the pinnacle of information security must always be considered when protecting these invaluable assets.

The intent of this security proposal is to ensure the ongoing protection and data security for a government agency's data center. Security and access privileges will be defined at the role and department levels, with added authentication for system administrators and members of the IT staff. Role-based access to this government facility will be tracked continually and reported using real-time log reporting and analysis (Amsel, 1988). This role-based approach to managing security will provide for inclusion of authentication, detection and deterrence in the areas of social engineering, firewalls, Virtual Private Networks (VPNs), authentication, security protocols and vulnerability assessments.

Confidentiality: Access controls help ensure that only authorized subjects can access objects. When unauthorized entities are able to access systems or data, it results in a loss of confidentiality.