Document Appropriate User Administration ( Topaz ) Essay

An electronic system is usually password protected which ensures only specific staff can access the information.

3. Describe two methods that you can use to calculate postage charges for mail and / or packages. [2.3]

Datanal will establish an Access Control List (ACL) and create Group Policies (GP) to establish authentication and authorization to specific network resources for users. Establishment of a Third Party Verification (TPV) process will provide confidentiality and integrity to meet current industry standards. Secure backup solutions that are compliant with industry standards will be established to insure the integrity of data. Datanal will insure compliance with International Trade Agreements, Federal patient laws, copyright laws and fair trade agreements for Information Security (IS).

56. Does the secure protocols are being used for administrative functions and transmission of login

Host level security deals with the access control on the wireless devices such as access points. Some recommendations are:

Individual users play an important role in any form of institution or organization but concerns are raised about the security. The network administrators clearly lay down a set of rules, regulations and protocols that an individual user has to agree accordingly upon which part of the resources and what class of service that the user can obtain.

There are no policies governing the TKU network except for one policy relating to printing reports and that policy is routinely ignored. Without policies to guide the users and administrators of the system it is impossible to discourage unwanted behaviors such as users routinely sharing network credentials. Additionally, the administrators have been inconsistently managing the network due to differences in knowledge, training, and requirements that can only be addressed with direct guidance in the form of policies.

There are multiple aspects of security in this network, which I have tried to implement as much as possible. This is where the CIA triangle comes into play, confidentiality, rules and limits to access information; Integrity, making sure the data is accurate and trustworthy; Availability, having reliable access to the information. I am going to talk about each aspect in a list format and explain how it’s used in my network. One thing that will be performed on all network devices is system updates and patches. They will happen on a monthly basis, on a weekend when the networks are not being used.

iii. Authentication and encryption mechanisms are required for all remote access sessions to networks containing EPHI via an ISP (Internet service provider). Mechanisms utilized or planned within RO include: VPN clients, authenticated SSL web sessions, secure shell and secured Citrix client access.

Employees can keep the information safe by minimizing screen when people or passing or when leaving the computer. The employee also should not share their password with anyone at anytime.

With the help of power or super access rights, these accounts are made stronger. The software gives the opportunity the separate the data for all different clients. The clients maintain their user account with three different variables. These are client ID, username and password. For each and every client, the default user account is different. Generally the production clients can change the default password, but generally it remains unchanged at the end of non-production system. Clients are available to install default system. This system is delivered standard password. To ensure the security of the system, the password has to be changed as soon as it finishes the installation process. It is also advisable to change in monthly interval. But R/3 service accounts and R/3 internal users should not be changed. The process is highly user friendly. Even the user can set his own minimum length of the password. Typically it varies between 3to 8 characters. The user can also set the time after which the password must be changed. If the user wants to keep the passwords without limits the default value has to be set as 0. All these facilities make the default user account

accessible by assigned staff, via their corporate login. The system is deemed to be secure but

All access to government servers, network devices and maintenance areas of the government agency's data center will be role-based and defined through authentication at a minimum (Amsel, 1988). Access methods will require two-party authentication and for access to server operating systems and rack-mounted servers, biometrics will also be required. One of the most critical success factors to ensuring a high level of security and stability and to guard again social engineering threats is to create and maintain authentication methods that thwart illusionary and coercive-driven access attempts (Burgess, Canright, Engø-Monsen, 2004). By having several roles requires to gain access to data,

Active Directory (AD) is different from specialized and often disconnected directories. AD is designed to play many different roles within an organization. The roles range from managing

Management is one of the most important human activities and has critical impact on life, growth, development or destruction of an organisation. In an organisation, managers with any rank or status should understand their basic duties i.e. maintaining a sustainable conductive environment where people can fulfil their commitments and objectives through collaborative approach. (Akhtar, 2011) A manager is responsible to achieve the business’s goals, visions and objectives by planning, organising, leading and controlling. Dubrin (1994) stated that in every organisation each member of staff must plan, organise, make decisions, and control the resources they need to accomplish the results expected