Qlt1 Task 1

22. Which of the following features should not be there in an access control system?

In the case of Yummy Good Treats it has been argued that since the company utilizes various technologies that work concurrently with networks and internet connections there is inherently an increased “risk of unauthorized access, wrongful disclosure, alteration and disruption in availability of company and customer data”(Fesl).Therefore I have selected the theme of understanding both vulnerabilities and threats to a given environment and the risks associated with said vulnerabities. Not every threat or risk can be accounted for due to the fact that there are unknown unknowns. However, one may be able to help mitigate threats by implementing a security policy with high standards. In order to create such a policy it is important that one first

First, data will be protected with IT security systems to include the most effective firewalls, encryption protocols and auditing processes. Data will be backed-up data using two systems, 1 local from separate

All employees are now subjected to mandatory training of at least 10 hours in preventing violations of the Foreign Corrupt Practices Act.

All users must be assigned with a standard unique identifier (user ID) and default password for accessing the systems. Default passwords should be changed upon initial access to the system.

We will also need to have a robust incident response and disaster recovery plan. Sooner or later, something bad will happen on our network. Without plans for incident response and disaster recovery, you will lose valuable information and possibly business. Your plans should be documented, regularly tested, and kept updated.

An issue is described as a matter that is in dispute where unique perspectives are held in regards to what should be done (Sexty, 2017). One of the main issues that still plagues TD is data security and privacy. As a financial institution that heavily depends on telecommunication, the impact of a data breach could potentially be catastrophic. Examples of a negative impact include unintentional releases of confidential information or financial loss all deteriorate the public trust and sustainability of the bank (Corporate Responsibility, n.d.). However, it is evident that disaster can strike at any time. No matter how much security is implemented, a hacker just needs to find one way through and that is exactly what happened to a credit company called Equifax. Hackers were able to “break an Equifax online tool and access personal data of more than 143 million customers” (Wattles and Larson, 2017).

Question 4. What are the key risk areas that ChoicePoint (and the data broker industry) as a whole need to address to protect its information and to minimize the negative perception (and the resultant likelihood of restrictive laws being passed) of the industry as a whole? [20 points]

When discussing security issues it is important to note that there are responsibilities that both the provider of the data must conform to and then there are responsibilities that the user must also conform to. The

This document includes the disaster recovery plan and related contingency requirements for Jeeb’s Band and Trust. It consists of detailed written practices and procedures to mitigate interruptions to “critical information systems” and the “loss of data and services” from the effects of natural or man-made disasters. The DRP applies both major, usually catastrophic, events that deny access to the normal facility for an extended period, and to less catastrophic events that may deny access to only portions of the facility or certain systems. The DRP is an IT-focused plan and therefore may also be referenced as a Technology Recovery Plan which has been designed to restore operability of the designated systems and applications in Jeeb’s Bank and Trust’s data center facility at an alternate site (or within the existing facility if not a total loss) after an emergency.

* Structuring of a better software with wider scope of accountability in case of leaks: the Company providing the service should undergo Research and Development expenses for formulating a software with better capabilities of protecting the accounting records of the company.

An important consideration of an information or operating system of a business or organization is to have a security system that protects information, data, and integrity of the company’s sensitive information and records. If a business or company does not have adequate security, financial, sensitive, and classified information may be compromised and prone to possible viruses and malware, hacking, or at risk of a cyber-attack to the company’s data resulting in possible

If a pass-through is provided to normal database access, traditional security controls can be brought into play.

There will be three levels of users: the admin, the senior employee, and the junior employee. The admin will be able to change the high and low temperatures, add and remove users, add, edit, and remove bins and individual plants, add and update, plant information, and receive texts and emails. The Senior employee will be able to add, edit, and remove bins, and edit plant information. Junior employees will only be able to edit bins and plant information. Only the administrator can add and remove users.

Windows authentications are assigned to the users’ account which makes the system more secure. Role Based Access Control (RBAC) is used to control the access of data by different roles of users. For example: an engineer cannot edit a particular job Technique after logging into the system, although an administrator has the ability to CRUD (create, read, update and delete) any job Technique in the system.