Sr-Rm-013: Network, Data, and Web Security

As consultants for Ancher Public Trading (APT), Learning Team A would like to discuss the implications of the Sarbanes-Oxley (SOX) legislation. This memorandum provides a brief history of SOX¡¦s creation, explains the relationship amongst the FASB, SEC and PCAOB, describes the pros and cons of SOX, assesses the impacts of SOX, and lists ethical considerations of SOX.

Team “C” was hired by Riordan Manufacturing management to overhaul the security features currently employed by the company. Management outlined a comprehensive plan that included a complete hardware refresh, security best practices and end user training. Team “C” will devote resources to assess the physical and network security issues and concerns at each Riordan plant. Once those have been identified, Team “C” will identify the data security issues and concerns present at each Riordan plant. Finally, Team “C” will address web security issues and concerns present at each Riordan plant and recommend a way forward for the company.

Lastly, for the portion of domestic antitrust, we will examine the Sarbanes Oxley Act. Enacted in 2002 it increases transparency in accounting. It was designed to prevent accounting errors and fraud in financial disclosures. The SOX act stipulates that the periodic financial reports be carried out in a certain way. The signing officers must review and certify the report prior to release. They are required to make sure all information is clear, true, not misleading and does not omit any important details. The signing officers are also required to evaluate the internal controls and their effectiveness within ninety days of the report. If there are any areas of internal control that are not working or may have issues they must also report this, along with any responsible employees. Finally, they must make sure the financial picture is being fairly portrayed through all of this.

The administration of data security depends on three unique ranges of responsibility. These are most certainly not regularly connected or facilitated as their management is set in various authoritative structures which may not converse with each other.

The framework of security policy is defined to construct a structure by the help of which policy gaps can be identified in an easy manner. A system specific policy would assist to ensure that all employees and management comply with the policies. This is also used to maintain the confidentiality for user authentication would assist in the confidentiality aspect of security, maintain integrity (There are several limiting rules or constraints which are distinct in the relational data model and whose work is to maintain the data’s accuracy and maintain its integrity.), availability and authenticity of the system. Access controls are a collection of mechanisms that work together to create security architecture to protect the assets of an information system. One of the goals of access control is personal accountability, which is the mechanism that proves someone performed a computer activity at a specific point in time. So, the framework acts as the guideline

This area of the Security Policy articulation presented is a report that all in all make up the Security Policy that administers the activities of the Campbell Computer Consulting and Technology Company. The security strategy covers the accompanying:

After major corporate and accounting scandals like those that affected Tyco, Worldcom and Enron the Federal government passed a law known as the Sarbanes-Oxley Act of 2002 also known as the Public Company Accounting Reform and Investor Protection Act. This law was passed in hopes of thwarting illegal and misleading acts by financial reporters and putting a stop to the decline of public trust in accounting and reporting practices. Two important topics covered in Sarbanes-Oxley are auditor independence and the reporting and assessment of internal controls under section 404.

The Sarbanes-Oxley Act (SOX) was enacted in July 30, 2002, by Congress to protect shareholders and the general public from fraudulent corporate practices and accounting errors and to maintain auditor independence.   In protecting the shareholders and the general public the SOX Act is intended to improve the transparency of the financial reporting.   Financial reports are to be certified by the Chief Executive Officer (CEO) and Chief Financial Officer (CFO) creating increased responsibility and independence with auditing by independent audit firms. In discussing the SOX Act, we will focus on how this act affects the CEOs; CFOs; outside independent audit firms; the advantages and a

With data and the collection of it, comes the added need for security. To begin to understand how we need to secure the data we collect we need to understand a few aspects of the

As technology evolves and continues to deeper integrated within businesses so does the ingenuity of attackers and threats. In order to provide a barrier on which stakeholders can rely on there must be the implementation of a system that serves as a means to information assurance. Information assurance, through addressing confidentiality, integrity, and availability of data serves to provide the business environment with the confidence needed to further its pursuits in the sometime sketchy world of the internet of things. Confidentiality of data speaks to the business need of ensuring that data, within a given environment, is protected by a set of policies, procedures and business practices that have the goal of limiting data access to authorized parties. An example of proactively enforcing confidentiality is the use of biometric or two-factor verification. However, keeping data confidential is not enough, the systems being used must be designed so that data can maintain its integrity. The goal of data integrity is to ensure consistently accurate data as it flows between various networks and systems. An example of a control that seeks to maintain the integrity of data is to have a backup system in place that may be used in the case of an emergency disruption which is commonly part of BCDR planning. With confidentiality and integrity addressed the data now needs to be available when needed. Availability of data can be provided through the use of controls such as physical

One of the measures that can be done in order to have secure and data protections is to destroy customer’s information that are no longer used. It is important to have ways in which the data will be protected and enhanced in terms of protection. The data that is found in the data environment is to have data protection so that the data will be protected in the end.

In this paper, the subject of database security is explored. Having a solid comprehension of database security should be considered a requirement within any organization. Data is a valuable asset for organizations and must be protected. An event can have adverse effect on a database system and must be considered a threat. This paper explores and introduces the reader to common threats to database systems and how to counter such threats. There is a strong need to control and manage data contained within a database system, and it is the role of the database management system to ensure that data is kept secure and confidential. The security of databases is more crucial today than it ever has been. Inadequate database security

The Sarbanes-Oxley Act of 2002 (SOX) was enacted into law in 2002 in the wake of corporation financial reporting scandals involving large publicly held companies. SOX instituted new strict financial regulations with the intent of improving accounting practices and protecting investors from corporate misconduct. SOX requires corporate executives to vouch for the accuracy of financial statements, and to institute and monitor effective internal controls over financial reporting. The cost of implementing an effective internal control structure are onerous, and SOX inflicts opportunity costs upon an enterprise as executives have

The concept of data security is not new to anyone. It refers to those technologies which have been discovered so as to keep the important data safe and out of reach from anyone undesirable. This has been done so as to keep the data safe from any intruders who could get into the computer system through hacking. As a result of advancements in the field of information technology, most data is kept on devices or in the clouds. With the help of such techniques, any unauthorized person could be kept out of a personal computer so that no one has access to any important data. Apart from stealing important data, there is also a chance that most data could be forged and changed so as to affect the authenticity of available information (Berman, 2016). This could not only affect organizations, but also individuals since the stolen or modified data could be important for them. Accordingly, the name data or information security came into existence. This branch of computer sciences started with the emergence of needing to keep data safe. The concept has been shoot and miss in areas of success in keeping data away from prying eyes. However, there have been some cases as to where security did not work. In this paper, I will examine the reasons Apple should stick to their guns and not aid the Federal Bureau of Investigations.

The concept of data security is not new to anyone. It refers to those technologies which have been discovered so as to keep the important data safe and out of reach from anyone undesirable. This has been done so as to keep the data safe from any intruders who could get into the computer system through hacking. As a result of advancements in the field of information technology, most data is kept on desktops or in the clouds. With the help of such techniques, any unauthorized person could be kept out of a personal computer so that no one has access to any important data. Apart from stealing important data, there is also a chance that any data could be forged and changed so as to affect the authenticity of available information (Berman, 2016). This could not only affect organizations but also individuals since the stolen or modified data could be important for them. For this purpose, the name data or information security came into existence. This branch of computer sciences started with the emergence of needing to keep data safe. The concept has been shoot and miss in areas of success in keeping data away from prying eyes. However, there have been some cases as to where security did not work. In this paper, I will examine the case between Apple and the Federal Bureau of Investigations.