Additional Information Identify Rules Of An Section Of The Original Policy Essay

Richman Investments has decided to expand their business. We have been given their new growth projections of 10,000 employees in 20 countries, with 5,000 located within the U.S. Richman has also established eight branch offices located throughout the U.S. and has designated Phoenix, AZ being the main headquarters. With this scenario, I intend to design a remote access control policy for all systems, applications and data access within Richman Investments.

Question 1.1. (TCO 1) Security policy contains three kinds of rules as policy clauses. What are they? (Points : 5)

“New users are assigned access based on the content of an access request. The submitter must sign the request and indicate which systems the new user will need access to and what level of access will be needed. A manager’s approval is required to grant administrator level access.”

The new user policy section has been modified to require manager approval and validation of the user’s access request based upon the user’s role. Previously the policy only required manager approval for user’s requiring administrator privileges. In accordance with Health Insurance Portability and Accountability Act (HIPAA) standards on access controls, users will have the minimum access required to perform the functions of their job in order to protect against unnecessary access to electronic protected health information (ePHI).

Mandatory access control is a single user, normally the network admin, who is given access to the users’ rights and privileges. They control access policies and are also in control of choosing which objects and what systems each individual user has access to and what they do not have access to. The access is made in the form of different levels. Each system and all folders containing information are put into a specific classification. The user will be in a certain classification that will only allow them to access data

Based on the premises that Richman has 5000 employees throughout the main office and several branch offices, this document dictates research solutions and details the appropriate access controls including policies, standards, and procedures that define who users are, what they can do, which resources they can access, and which operations they can perform on a system. |

My college is a rather large education organisation that is partly responsible for the safety and actions of its staff and students that use the computer systems within the premises. In order to comply with legislation's and give themselves a leg to stand on if any legal issue were to arise, they hand each student and staff member a usage policy that basically says as a student/staff member you agree to these terms and rules about using our computer systems.

Due in Week Seven: Outline the Access Control Policy. Describe how access control methodologies work to secure information systems

“New users are assigned access based on the content of an access request. The submitter must sign the request and indicate which systems the new user will need access to and what level of access will be needed. A manager’s approval is required

3.p16 The purpose of access control is to regulate interactions between a subject and an object, such as data, a network or device

breach of this guideline will not be tolerated and legal action may be taken by the

The drawings that are received from DIPS are subject to different classifications, most if not all are restricted due to there content, every employee has signed the official secrets act before being employed within BAE submarine solutions and know that thease are to stay within the company and not to be distributed to outside sources. Once thease drawings have been used they need to go back to the place of issue to be disposed of in the correct way.

The unit personnel may lack knowledge on how to protect the unit’s plans and information sources such as warrants, witnesses, evidence, capabilities, raids, who, what, where, how, etc.

mandatory and discretionary access control policies. ACM Transactions on Information and System Security, Vol. 3, No. 2.

From the adopting the Official Secrets Act 1972. (Act 8) the police force building is the restricted area and the security is vital. Thus the level of safety is strictly controlled in accordance with the Official Secrets Act 1972. Apart from that every movement in the particular police building is strictly very limited and so verbally or in written is necessarily required. In this circumstances while a civilian staff transfer into the police force is came from various backgrounds departments such as other departments than the police force. Obviously, they were lack of knowledge and information on the police force background as well as the culture itself. They are prohibited to access the type of classified documents accept they were officially permission to assign the task in the Secret Unit.