A Short Note On Managing The Workstation Domain

All the employees come under this policy. It doesn’t have any specific permission but contains common permissions for all employees. But some employees of the organization need special and specific permissions on their domain to work. Thus, to allow these specific permissions on specific domain RAP (Remote Access Policy) is being used. This policy gives directions to the specific domain on which it is applied. (Sailer et al,

Workstation Domain is where all the users work. Before a user can log into the machine, he/she will need to be verified

Attacks on physical systems: In current days, only organizations are facing the security threat is not the case, even laptops and mobiles are entrusted with the most sensitive of information about the organization. These devices, whether they are company property or personally owned, often contain company documents and are used to log on to the company network. More often than not, these mobile devices are also used during conferences and travel, thus running the risk of physical theft. The number of laptops and mobile devices stolen per year is ever on the increase. Another threat affecting physical security is that of unprotected endpoints. USB ports and DVD drives can both be used to leak data and introduce malware on the network. A USB stick that is mainly used for work and may contain sensitive documents, becomes a security risk if it is taken home and left lying around and other members of the family use it on their home

Our managers face a range of threats and consequences for security failures including financial loss, civil liability and criminal liability. Threats can come in many forms including physical probing, invalid input, and linkage of multiple operations. In order to limit these types of threats, Sobota will comply with the following organizational security objectives: audit, information leakage, and risk analysis. A risk analysis will identify portions of Sobota’s network, assign a threat rating to each portion, and apply the appropriate level of security. They will

The reason by is because if all employee is assigned a workstation if a security brisk happens they can track where it came from. Example if an employee finds a flash drive and plugs it into the computer and it had a virus then the network team should be able to track the virus to the workstation and disconnect it. For those who may not know a virus can “attaches itself to a program or file enabling it to spread from one computer to another, leaving infections as it travels.” Since this can happen there should be a policy on things like that as plus policy for website, downloads and take home machines. Example if an employee downloads something it must be scan or employee cannot got to unsecure website.

There are many security concerns that are apparent when looking at this lab and all of the services that have been set up on the devices on the network. I will be going through the devices one by one and go through the security issues apparent and will be going through how they should be addressed in this environment and in an enterprise environment.

Securing an IT environment properly can be broken down into three basic questions. The first question to address is what assets within the organization need protection? After these assets have been identified, it is important to ask in what are they threatened? Finally, the question of what needs to be done to counteract these threats (Stallings & Brown, 2012)? By answering these questions, it is

The ability to address this risk provides benefits in multiple ways. As the remote computing environment grows, under the current technical implementations, the infrastructure support needs will continue to increase and the risk of a data breach will continue to grow as more devices will be exposed to those threats. Addressing this issue and reducing the risk provides multiple benefits. This will allow the remote user computing base to increase without the need to increase support staff. The risk associated with a data breach in the remote computing environment will be substantially reduced, even with an increase in the number of remote users. The challenge in this project is in reducing the risk associated with the remote

Some of these critical challenges that this industry faces are: network access control, identification, authentication, wireless and mobility, and most recently, securing cloud computing. With the increase of technology, wireless devices, and number of attacks happening, our main goal is protect your network and increase productivity by identifying and eliminate threats before they happen. There are companies that haven’t been so lucky. The costs and potential consequences of security problems can be devastating, if not, disastrous.

Security will always be a driving emphasis for the success of an organization. As technology continues to grow and develop, there is a greater need for understanding threat environments. The growing anxiety with security and privacy concerns make receiving a virus on a personal or company computer dangerous. It is vital that both individuals and organizations take the time to understand how to protect themselves from schemes used by hackers. It only takes one mistake for a hacker to have control of your computer. A proper understanding of security offers direction for improving business procedures and educating users of acceptable threat management and authentication practices. The management of network and application security

The Workstation Domain is where most users connect to the IT infrastructure. A workstation can be a desktop computer, laptop computer, or any other device that connects to your network. The most common risks within the Workstation Domain are unauthorized access to a workstation and unauthorized access to systems, applications, and data.

In a Workstation Domain, you need to make sure virus protection is set up. You are protecting administrative, workstations, laptops, departmental workstations and servers, network and operating system software. You can enable password protection and auto screen lockout for inactive times, use workstation antivirus and malicious code policies, use content filtering and antivirus scanning at internet entry and exit, and update application software and security patches according to the policies and standards. You need to also make sure that the laptops are up to date on the anitivirus software.

For securing remote access, restricted access should be provided to minimum services and functions. It should be ensured that staff uses strong passwords on their personal computers. There should be a two factor authentication such as both a password and a token-based authentication (Thomas & Stoddard, 2011). Access to remote access should be removed immediately upon the expiry of the eligibility. This paper presents the ten requirements that can make the network systems secure and protected in a corporate

| Mobile devices: The majority of individuals now carry with them devices that in the past were the purview of IT. Whether it is smart phones such as iPhone, Blackberry, Android, and Windows Phone 7, or tablet devices such as iPad and Google OS or Windows based devices, individuals have the power of a desktop in their hands. Given existing technologies, users can perform most of their standard business responsibilities using these devices and the applications available on them. Whether it be customer, product/service, or financial transactions, sitting at your desk with a computer is no longer required. Legacy IT organizations struggle with this new direction, and issues of control and change persist.

Kurisu, (2016) Stated that securing the infrastructure is essential and it includes being able to allow the things that are supposed to happen and preventing those that are not. Hence, the network infrastructure includes software and hardware and may also include the off-site capability of cloud computing. Therefore, network security involves the process of implementing preventative measures that would protect an organization against any adverse activity involving its network infrastructure and these components. Kurisu, (2016) Also stated that the protection if data is both a hardware and a software issue (Kurisu, (2016)). Kurisu, (2016) States that several of the most secure techniques are found in devices that maximize the correct security-enabled hardware (Kurisu, (2016)). Security officers and administrators are being tasked to implement the necessary controls which would protect and secure the organization 's network environments and platforms. These security measures and controls should address each aspect of the network infrastructure, including the combined resources of hardware and software within an entire network that enables network connectivity. The pertinent aspects are communication, operations, and management of an enterprise network. It has become an increased challenge for the security officers and administrators to ensure that these components of