The Data Loss Prevention Approach

In the 1960’s, computer technology was just starting to dominate much of modern life and this new technology raised concern about whether humans had command over certain important functions like the control of nuclear weapons. The novel Fail-Safe addresses these fears by portraying a technology doomsday scenario where a malfunction by a computer causes a nuclear bomber group to be deployed against Moscow. Along with showcasing issues relating to technology, and its limitations, Fail-Safe portrays several political aspects of the cold war including the role of the “human factor” within the rationalized, technological fetishism and examples of human weakness within the “man vs. machine conflict

A Disaster Recovery Plan (DRP) focuses on the recovery of IT systems, applications, and data in the

d) The information is acquired on the data bus and send it to TDO. (Alghafli, Jones, and Martin. 2012).

Proper training is to be given to employees in order to understand the importance of the data and how to protecting it.

operating the same way as an ERP system, since all data resources in this department are

In addition to that, company must develop policies about dealing sensitive data, for users and IT department. Such documents may vary from company to company but there are some important aspects that each of them must include:

This Enterprise Security Plan (ESP) for Riordan Manufacturing employees the levels of security required to protect the network and resources utilized to communicate. It is intended purpose is to formulate a means to counterattack against security risk from potential threat. The ESP servers as a way to identify risks and to ensure a contingency plan is in place to protect the availability, integrity, and confidentiality of the Riordan organization's information technology (IT) system. The ESP benefits all employees however it is most beneficial to information resource managers, computer security officials, and administrators as it is a good tool to use for establishing

If a corporate IT director has been asked by their boss to program software so revenue will appear higher than it really should you have several options? Basically you have three main paths to choose. You could do what you have been asked to do and program the software. You could simply tell the executive that you are not comfortable doing it and just leave it alone. Or you could not do what you have been asked to do and report it to human resources and or the proper authorities.

Having this in place and implemented as need to let any victim aware of the data leak and the proper sets they need to follow. Going further having any limited access to certain areas that would house sensitive data along with a policy in place sign out any device that has data on it. Most important is establishing a strong policy and procedures which provide clear, consistent standards for reporting, investigating, and tracking incidents of loss, and disclosure of protected data. Ensure the policy and procedure specifies when it is appropriate to notify individuals whose protected data may have been

The mission-critical business systems and services that must be protected by this DRP are: Payroll, Human Resource Data, POS backup media, and Web Servers

The incident response policy is very useful as it offers guidance on how to handle the situation when data has been breached. Through the policy security experts can restore the situation to normal and ensure that business runs again as usual without incurring to much losses due to time wastage. The policy gives clear guidance of the tasks and activities that should be carried out by the employees and the managers including procedures, reporting and feedback mechanism (Butler, 2015).

Consider a scenario when important notices or information must be sent to specific set of people at a given time. If IT is down, the cost of downtime can result in the company losing its value with customers, stocks decline and stakeholder confidence is lost. Therefore, DR plans in an organization should identify potential risks that exist within their IT environment and define steps to mitigate those risks in order to ensure business

Although enterprise resource planning (ERP) projects are considered to be a risky investment for any organization, Keda had quite a number of reasons on why it decided to embark on ERP. The introduction of the Keda's silo-based model, as a way of encouraging a decentralized decision-making process, was actually affecting the performance of the Keda business. This was mainly due to the duplication of the identical processing tasks from different business units.

Organizations must consider some type of multi layered security which will focus on confidentiality, integrity and availability on the information that in being secured. A layered approach

Frenzel (2004) claimed that to be successful, a firm’s IT management team must take action on the following critical areas: business management issues; strategic and competitive issues; planning and implementation concerns; and operational items. If for any reason, the organisation experiences difficulties in the above areas, the manager will need to set goals and objectives to overcome and prevent these issues.