Information Security Use Policy Analysis

One of the most significant concern facing IT industry in the 21st century is legal, social, ethical and professional issues that are associated with appropriate uses of technologies in computing. During the implantation of the Greenwich Freecycling website, many of these issues were encountered. By deploying the correct combination of technologies that is available when implementing the website some of these issues were conquered and overcome.

Based on the premises that Richman has 5000 employees throughout the main office and several branch offices, this document dictates research solutions and details the appropriate access controls including policies, standards, and procedures that define who users are, what they can do, which resources they can access, and which operations they can perform on a system. |

This policy needs to be applied to all users, employees, contractors, suppliers and to all IT resources such as e-mails, files, data, messages and documents controlled or administered by The Department of Homeland Security.

Scope of the policy: This policy document defines common security requirements for all Practice personnel and systems that create, maintain, store, access, process or transmit information. This policy also applies to information resources owned by others, such as partners of the Practice, entities in the private sector, in cases where Practice has a legal, contractual or fiduciary duty to protect the

|Review of Informational |Whether the Information Security Policy is|The security policy |Without the review of |Each policy should be |

The purpose of this policy is to establish acceptable and unacceptable use of electronic devices and network resources at Eastern Widgets. Eastern Widgets provides computer devices, networks and other electronic information to meet its

An effective information security program should include, periodic assessments of risk, including the magnitude of harm that could result from the unauthorized access, use, disclosure, disruption, modification, or destruction of information and information systems that support the operations and assets of the organization. Policies and procedures should be based on risk assessments, cost effective reduced information security risk, and it should ensure that the information security is addressed throughout the entire life cycle of each and every organizational information system. Subordinate plans for providing sufficient information security for groups of the information system, facilities, networks, or information systems.

Fastenal’s mission statement is “We are where you are”. Their vision is to grow the professional relationships the employees have with their customers all while increasing the companies’ profits. As stated in the first assignment Fastenal has adapted well to new technology over time. One downfall that is still present is there is not remote access for employees to log into Fastenal’s employee portals and for the Fastenal vending machines, employees have to use a separate log in. This has caused delays in answers to customer’s questions, vending machine downtime, and delayed orders. With access to one remote site, Fastenal employees can eliminate all of these problems. I.T. plays a major role in this plan because without it the software would not exist. Fastenal will need

Computers and the use of the internet and emails are for communication between employees and our customers. Personal email use should not be conducted on company property at any time. Do not forward any type of inappropriate material to other employees or our customers. Always use professional language when sending an email to our customers and other employees. The use of the internet is for job-related functions and software information should not be downloaded without the permission of a supervisor or an information technology employee. Employees should refrain from making personal phone calls or receiving personal phone calls during working hours. Emergencies may arise where personal phone calls are necessary and will be allowed. Any other urgent calls need to be kept to a brief conversation.

A well written and understood security policy is key to protecting an organization from security breaches or pit falls associated with DDos , malware and virus attacks. During 2016 DDoS or distributed denial of service attacks were up by 71% and most used an attack incorporating botnet malware. Botnets are used to send email spam and engage in click fraud attacks and generate malicious traffic for DDoS attacks. These attacks can not only slow down an organizations network traffic, but can cost a company massive amounts of loss in capitol. A well-constructed security policy is the basis and structure to help create a comprehensive security program for any organization. Some key areas that need to be developed for a good security policy

InfoSec Policy must address all information, frameworks, projects, offices and other tech establishments. users of advancements and outsiders in a given relationship, without exceptions. This Policy applies to all

Establishing an effective Information Technology Security Policy Framework is critical in the development of a comprehensive security program. The purpose of the Information Security Policy Framework is to insure your organization will be able to provide the minimum security level necessary to maintain confidentiality, integrity, and availability of the information it collects and uses.

Citrix is a multinational corporation and is a market leader in mobile workspaces, it provides a seamless virtual network for professionals and business owners who are always on the move. Combining networking and cloud services through a secure network that allows instant access to desktops, communications, apps and data. With over 25 years of experience, Citrix aims to increase productivity through intuitive IT processes. Citrix has an annual turnover of 2.9 billion in 2013. Currently, Citrix is used by over 330,000 organisations with over 100 million users across the world. (Citrix, 2014)

The use of company computers, electronic media, and company services is for business purpose only, personal use is not permitted. Employees of Computer Inc. are expected to use these electronic services responsibly and productively.

Employers believe employees are taking advantage of the Internet while at work to access inappropriate websites such as shopping, gambling, pornographic material, and illegal downloading. Therefore, employers are searching for ways to reduce Internet exploring and increase work production, and remain within the state and federal guidelines (Young, 2011). To combat these issues, monitoring technologies are put in place to make employees more productive during company’s work hours. Monitoring technologies are classified as the use of computerized system that automatically collect, store, analyze, and report information about how an employee is performing his/her job (Wen, Schwieger & Gershuny, 2007). This helps companies to track their employee’s Internet movements, obtain detailed information (Wen, Schwieger & Gershuny, 2007), and protect the privacy of their company. In return, employers hope this will limit or eliminate employees from extensive use of the Internet.