Essay on IS3220 Project Network Security Plan Ch

There is a mess of servers, switches, switches, and inward equipment firewalls. Each of the association's areas is working with diverse data advances and foundation IT frameworks, provisions, and databases. Different levels of IT security and access administration have been actualized and inserted inside their individual areas. The data engineering framework is maturing and numerous areas are running on antiquated fittings and programming. Additionally, the framework is woefully out-of-dated regarding fixes and overhauls which significantly expand the danger to the arrange as far as classifiedness, trustworthiness, and accessibility.

This policy defines the security configurations users and Information Technology (IT) administrators are required to implement in order to ensure the integrity, availability, and confidentially of the network environment of Richmond Investments(R.I). It serves as the central policy document with which all employees and contractors must be familiar, and defines regulations that all users must follow. The policy provides IT managers within R.I. with policies and guidelines concerning the acceptable use of R.I. technology equipment, e-mail, Internet connections, network resources, and information processing.

“Security policies are intended to define what is expected from employees within an organization with respect to information systems. The objective is to guide or control the use of systems to reduce the risk to information assets. It also gives the staff who are dealing with information systems an acceptable use policy, explaining what is allowed and what not. Security policies of all companies are not same, but the key motive behind them is to protect assets. Security policies are tailored to the specific mission goals” (InfoSec Resources, 2016)

The government and organizations are to comply with security laws and regulations in order to fully operate and maintain protection of information systems. Some of these security laws and regulations may vary for every industry and with some organizations; however, implementing security standards with a broad in scope provides reliable reasonable security. In many cases reasonable security implemented throughout the information system can include a high-level of protection in the operation of government and organization systems. There are best practices and risk management frameworks tools to consider when providing a higher level of security in the performance and protection of information systems. It’s key to maintain effective security policies that are fulfilled by security standards and tools to help manage the protection of the information systems.

A company continuously improves on this document to establish new policies for new assets. However, the company mainly will concentrate on information technology security. Most companies store critical data and information using computers and the company needs to create methods to protect the data from loss or unauthorized access. A security policy will mainly include a breakdown on how the company plans to protect its assets and a plan to educate the staff on the use of the security policy.

The Global Security Act also includes Global Network Security. Network security consists of products and services used to monitor, detect, and prevent unauthorized access, misuse, malfunctioning, and destruction of a computer network. It helps to provide and maintain a secure platform to enable users in the network to perform their critical tasks. Network security is increasingly gaining prominence especially because the number of hackers who want to extort money or steal critical information has increased. Not only has the number of networks security threats increased, the level of sophistication is much higher and traditional defense mechanisms are no match for these threats. Organizations, both large and small, have begun to realize the importance of network security systems and have increased their investment in network security. In addition, there is now a growing realization that network security systems can also increase workforce productivity,

With the widespread of computer networks and the increasing number of threats, privacy issues, etc. information security is now a necessity for all organizations. This has alerted businesses globally to take steps in ensuring the security of their information and other assets.

Networks have become a vital part of almost every organization changing the way that business is conducted from day to day. In the early days of the computer era business men and women have had to use standalone machines that were partially interconnected or not interconnected at all. Since then computing has gone through various changes through a number of decades which has led to the complete integration of various computing devices and now professionals are able to share hardware and software resources without difficult which has led to the reduction of business costs and a higher level of productivity. For example instead of having to buy a printer for every department or office, an organization can simply use one networked printer which everyone in the organization has complete access to. Another cost reduction example is the ability for an organization to install software such as Microsoft project on a server and therefore, enabling every one that has access to the server to use the resource. This saves the organization expenses as they don’t have to buy separate licenses for every user’s computer.

A sophisticated information security plan defines the goals of the information system of a business and sketches a technique to attain these described goals. On the other hand, an information system without security plans may very well be a disjoint bunch of countermeasures that deal with a variety of threats. Data systems security policies, then, can sometimes be used to aid integrate the a variety of aspects of an organization to attain enterprise goals.

Monitor all entry way into the organization’s network – it is desirable to have only one access point to and from the network. However, with more than one entrance, it is important that they be all monitored continually, to aid in identifying suspicious network traffic. Abnormal traffic has a high probability that a breach is taking place.

Network security is a broad term used to refer to processes and procedures that are configured by a company’s network administrator to provide visibility and prevent denial of service, unauthorized access, modification and exploitation of the corporate network or respective resources. The resources refer to files or computer programs available on the corporate network infrastructure. The infrastructure comprise of corporate software and hardware resources that facilitate communication, connectivity, management and operations within the corporate network. (Vacca, 2014)

Voice and data network systems, network security, external networking such as the internet, the administration of fileservers and UNIX hosts, development and support of desktop operating systems and applications, development and implementation of strategic IT initiatives, and telephone systems and switchboard

To ensure information security for this organization, a review of the company’s network, information systems and security policies must be conducted. In this report, I will be a security expert for a large insurance company. My job here is to assess the company, revise and reproduce the security policies, identify the risks, threats and vulnerabilities and offer recommendations to ensure protection of the company’s network and assets.

* A decrease in the prices of computers has resulted in making computing a very common trend which means that nearly everyone owns a computer now and has enough information about a computer that he can easily harm an organization’s network.

The lack of guidance for use of computers and the LAN is contributing to the requirement for excessive maintenance of the company 's hardware, software and LAN. By addressing this problem immediately, we can prevent hackers from interdicting the company LAN, set a baseline for the company information security plan, and alleviate unscheduled maintenance on network infrastructure.