Importance Of IT Security Models And Access Control

2.1 Describe the features of manual and electronic information storage syatems that help ensure security

• IT System recovery procedures (i.e., mission critical IT systems, applications, and data, VoIP /

Users can be the main risk to an organization. A disgruntled employee can access the server and open it up to all types of security issues or install malware or virus’. User access to the server should be limited to users that need admin level and closely monitored. Admin accounts should never be used for day-to-day activities as this could lead to username/passwords being stolen more easily providing access to others from the outside. When an employee leaves their admin and general use accounts should be turned off immediately. If an employee is to be terminated with cause, theses accounts should be disabled prior to the termination discussion. Users risk are medium impact and highly controllable with policy and procedures.

There is a mess of servers, switches, switches, and inward equipment firewalls. Each of the association's areas is working with diverse data advances and foundation IT frameworks, provisions, and databases. Different levels of IT security and access administration have been actualized and inserted inside their individual areas. The data engineering framework is maturing and numerous areas are running on antiquated fittings and programming. Additionally, the framework is woefully out-of-dated regarding fixes and overhauls which significantly expand the danger to the arrange as far as classifiedness, trustworthiness, and accessibility.

Physical security is implemented via a locked door policy that is set with swipe card access. The company has security cameras set up in the front entry hallway to record entry and exit of all personnel. The server room floor is raised with cable management fed through easy access panels. The server room is locked at all times, with access is via swipe card only. There are foam sprinklers throughout the roof system to protect against fire. Racks are locked up to ensure no items can be manipulated without appropriate personnel present. Studio and production labs also have swipe card access to protect equipment.

Individual users play an important role in any form of institution or organization but concerns are raised about the security. The network administrators clearly lay down a set of rules, regulations and protocols that an individual user has to agree accordingly upon which part of the resources and what class of service that the user can obtain.

Security shall be a high priority requirement. Since this system is intended for a wide range of users, it shall be user-friendly, requiring limited training and assistance.

Based on the premises that Richman has 5000 employees throughout the main office and several branch offices, this document dictates research solutions and details the appropriate access controls including policies, standards, and procedures that define who users are, what they can do, which resources they can access, and which operations they can perform on a system. |

When businesses provide computers for public use, several challenges are presented. In addition to allowing the general public this service, and ultimately growing their market share, a business must define the line between appropriate use and securing the network.

None of the locations have secure systems in place to handle the necessary duties. Pay scales are varied so maintaining and organizing them is complicated and hand written, and then entered into the system by a payroll clerk at headquarters. Records for training and development are being kept on an Excel spreadsheet and stored in an insecure place by the training and development professionals. Recruiters are maintaining their own application information with resumes filed in a central storage area and applicant status tracking is recorded on Excel spreadsheets. There is no central file area for employee files. The managers responsible for tracking FMLA absences and requests under the ADA keep their own individual files. The compensation manager keeps records of job analyses, salary surveys, and individual compensation decisions on an Excel spreadsheet. Employee relations specialists keep track of complaints, grievances, harassment complaints, etc. in locked files in their offices (Apollo Group, Inc. 2011).

It is the medical office specialist duty to protect all PHI by keeping it private and secure.

Steps are taken to maintain the confidentiality of data through digital signatures by the personnel and through the computer security assurance using the key coding and unlinking of the data.

While this is a daunting task, by breaking these controls down into larger groups the basis for policies and procedures are outlined and framed. The key areas that must be met initially are the establishment of a system security plan that describes we are implementing as well as the security control requirements for the

Valuable assets, including network connectivity, stored data, processes and procedures, and client information can survive centralized disruption or destruction and can be revived quickly through the agency’s

As the use of computers, databases, and technology in general, security has grown to be a powerful tool that has to be used. The threat of outside sources intruding and exploiting crucial information is a threat that is present on a daily basis. As a part of creating and implementing a security policy, a user must consider access control. Access Control is a security tool that is used to control who can use or gain access to the protected technology. Access control security includes two levels; logical and physical. Though database intrusions can happen at any moment, access control provides another security barrier that is needed.