M1 Business Essay

Confidentiality is the protection of information from unauthorized access. This is the assurance that information provided has not been made known to unauthorized persons, processes or devices. The application of this security service suggests information labeling and need-to-know imperatives are core aspects of the system security policy. Information, in today’s world, has value and everyone has information they wish to keep secret. Information such as credit card details, trade secrets, personal information, government documents, and many more. It was stated (Securitas Operandi™, 2008) that, we are bound to keep many secrets – corporate, staff, and personal secrets. We must keep this confidential information under wraps and earn the trust of employers, colleagues, and regulators every day. Mechanisms to enforce this include cryptography, which is, encrypting and decrypting data, access controls such as

The departments of a company that are holding personal information are required to have adequate security measures in place. Those include technical measures (such as firewalls) and organisational measures (such as staff training).

Have an involvement in the parts of the fundamental data framework design and their usefulness, and separate amongst equipment and programming.

Explain who the information owner is that has the responsibility for the information and has the discretion to dictate access to that information.

The framework of security policy is defined to construct a structure by the help of which policy gaps can be identified in an easy manner. A system specific policy would assist to ensure that all employees and management comply with the policies. This is also used to maintain the confidentiality for user authentication would assist in the confidentiality aspect of security, maintain integrity (There are several limiting rules or constraints which are distinct in the relational data model and whose work is to maintain the data’s accuracy and maintain its integrity.), availability and authenticity of the system. Access controls are a collection of mechanisms that work together to create security architecture to protect the assets of an information system. One of the goals of access control is personal accountability, which is the mechanism that proves someone performed a computer activity at a specific point in time. So, the framework acts as the guideline

When it comes to data management the need to ensure that all laws that pertain to customer privacy are followed. There are many different laws whether they be federal, state or local laws to ensure that the data that is collected is protected. For example, H.R. 2092 the student digital privacy and parental rights act helps protect

information which is developed to be shared across authorized users in a secure environment .“

This Privacy Policy describes how XYZ Inc. collects, uses, shares, and retains personally identifiable information provided by customers. This Privacy Policy pertains only to customers located in the United States; other branches may have different privacy policies based on the laws and requirements of their locations. This policy doesn’t pertain to the practices of other entities such as business partners, i.e., vendors, sponsors, or advertisers (Neuhaus, 2017).

Restricting access to sensitive information plays a vital role in the success of any organization. Information is deemed sensitive when it needs protection from unauthorized access. Protecting this information is essential in safeguarding security and privacy of an organization. Thus, an organization such as Bank of America has taken measures geared towards protecting its sensitive information from unauthorized access. Just like other organizations, Bank of America has two types of sensitive information. The first type of sensitive information is personal information. This is data that may affect an individual if

1.2 Manage data, invoices, records, or other situational or consumer specific information in a manner consistent with maintaining consumer confidentiality.

I also was told by the staff in my fieldwork that the agency uses Saleforce-Cloud webbase design database this system is used by medical field. The agency use 90% of the work through this program and 10% is done by hand. This database system has a built confidentiality for clients/patients, therefore, data is not shared. It is great to know that safe guards are in place to protect clients and patients information.

At the same time, there must be a strategy that will educate executives on how to protect their personal information. This will be accomplished using a workshop that will teach them about the warning signs of fraud and specific strategies to safeguard against it. For example, if there is someone trying to steal an executive's identity. The monitoring services will serve, as the first line of defense to immediately prevent the fraud before it occurs. To reduce the chances of this person becoming a target in the future, the prevention strategies will limit access to any kind of personal information. Over the long term, the combination of these two factors will control how the information is used and monitored. (Biegelman, 2009, pp. 295 312)

Personal data is quickly becoming a commodity in today's high technology world. This information is used by banks, investment and brokerage companies, credit card merchants, government agencies (local, state and federal), and consumer product-based companies. Most people probably don't realize the amount of information that's shared between companies, or how often it's done. Many companies sell and share customer data to help sell products and find out what new products they should produce. Other uses include gathering information about inventory levels to help better determine what types of products are bought at which store, when and how often. This can be used for inventory and production, to make sure that the store (or

Ultimately, this changed how business analyzed their risk equation. Businesses would have to face the consequences when information is breached, and the reputation from its customers. Enterprises are trying to be proactive when collecting, storing and protecting an individual’s data. A privacy checklist for a business

Authorized users are held responsible for preventing access to company’s resources and data by non-authorized users.