Physical Threats And The Pharmacy

| “Security controls are the management, operational, and technical safeguards or countermeasures employed within an organizational information system to protect the confidentiality, integrity, and availability of the system and its information” (NIST SP 800, 2009). The control allows the organization to efficiently mitigate the risk coming from the use of information System (IS) to conduct business operations and processes.

Describe the hardware and software requirements of your chosen information system. Be sure to consider both the server-side and client-side hardware and software. If you do not have access to specific details about the server-side hardware and software, make reasonable assumptions based on the kind of hardware and software that you believe would be necessary to run your system.

2) (1 point) What kind of control is this control procedure – a preventive or detective control? Explain.

A threat is defined as a potential cause of an incident that may cause harm of systems and organisation, or data. A potential and obvious threat is someone physically stealing hardware, or data. Physical threats are any incident that could result in the loss or physical damage to a computer system, there are threats that are pretty much unpreventable such as fire, floods, lightening, and earthquakes, and these are all physical threats that are uncontrollable. The humidity in rooms which computers are in does to an extent need to be controlled, if the room is too hot or cold if could have a negative effect on a computer system. There are also human threats such as; vandalism, theft, disruption, accidental or intentional errors.

The next step is to identify the risks, threats and vulnerabilities. Hackers attack from the Internet, failure of hardware or software systems, or network outages are the most common threats. And common vulnerabilities are absence of firewall and antivirus software, absence of update patches, not adequately trained associates etc.

Technical controls involves the use of technology and expertise to mitigate risk. An administrator who installs and configures a firewall and IDS to prevent attacks on the network is implementing a technical security control. Management controls use planning and assessment ways to reduce risk. Conducing risk assessment, vulnerability assessment and penetration testing. Lastly. Operational controls are implement by people. Having awareness training and having a contingency plan is a way of implementing operation controls (Darril

User access must be considered and then strategies to ensure that only the correct users are able to access the material but be designed.

4. Explain the actions to take if there are suspicions that an individual is being abused (2.2.1)

|• Fire-Adequate fire signs such as fire exits, fire extinguishers with correct colour labels on, fire blankets etc. |

p. 10). Other controls include: Asset Classification and Control maintains an appropriate level of protection for all critical or sensitive assets. Communications and Operations Management reduces the risk of failure and its consequences by ensuring the proper and secure use of information processing facilities and by developing incident response procedures. Systems Development and Maintenance prevents the loss, modification, or misuse of information in operating systems and application software. Business Continuity Management develops the organization’s capacity to react rapidly to the interruption of critical activities resulting from failures, incidents, natural disasters, or catastrophes. Compliance ensures that all laws and regulations

Homework is due by 11:59 pm on the date assigned and should be submitted as a .doc, .docx, .txt,

After deciding a course of action the subject must prepare for the attack. Behaviours may include acquiring and practicing with weapons, assembling equipment, arranging transportation, observing significant dates, rehearsing, conducting final act behaviors, or costuming (Calhoun, F. Weston, S. 2003. p.79).

That part of security concerned with physical measures designed to safeguard personnel, to prevent unauthorized access to equipment, installations, material, and documents and to safeguard them against espionage, sabotage, damage, and theft.

Companies can prevent falling victim to unauthorized physical access by developing and implementing simple policies, standards, procedures, and guidelines for employees as well as guests to follow. Secure all areas containing sensitive systems and/or data. Require staff to follow entrance procedures when entering a secured area. Also ensure that physical data such as important documents are secured. Require

Users: This can include social engineering threats, misconfiguration of equipment, and inside threats where employees steal or leak information intentionally.