USTPO Role

Physical security can be very complex, as the evolution of technology changes on a daily basis. The dual role concept is a dilemma that poses a constant struggle within the agency. The ability to maintain consistency with technological advancements utilizing physical security practices of the past is a significant challenge that FPS faces. Another area of concern is the complexity of security and the deficiency of training. Advancements in technology necessitate training advancements. From the initial understanding of basic alarm theory covering the simplistic concept and design of an intrusion detection system (IDS), to a system that is virtually state of the art in capability and technical

After careful review of the current Service Level Agreement(SLA) “A Service Level Agreement for Provvision of Specified IT Services Between Finman Account Management, LLC, Datanal, Inc., and Minertek, Inc.” we have determined that standard Information Technology security measures have not been addressed fully. Following are the recommended changes highlighted in the specific sections that need to be addressed. These changes are being recommended to protect Finman’s data and intellectual property. Established standards such as Best

Another step involves security checks upon implementation and describes agency-level threat to the business scenario or the mission. It similarly entails sanctioning the information system for processing and lastly constant monitoring of the security controls. FISMA and NIST's standards are aimed at offering the ways for agencies to achieve their identified missions with safety commensurate with the threat (United States Department of Agriculture, 2015). Together with guidelines from the Office of Management and Budget (OMB), FISMA and NIST create a framework for advancing and growing an information security scheme (SecureIT, 2008). Such framework includes control descriptions and evaluation, program development, and system certification and accreditation. The final objective involves conducting daily functioning of the agency and achieving the agency's articulated objectives with sufficient security commensurate with risk.

The purpose of this paper is to review State of Maryland information security program documentation and to determine the security standards used to create the program in order to protect confidentiality, integrity and availability of agency operations, organizational assets or individuals which is the main agenda of State of Maryland Department of information technology. We will also discuss about other standards that can be useful for the State of Maryland Information technology and compare and contrast the standards.

The Department of Defense is one of the oldest executive departments of the executive branches in the United States of America and is in control of national security and the Armed Forces of the United States. More than 3 million employees embody the Department of Defense and control it’s day-to-day operations and is well funded with a budget of $680 billion thanks to a bill that passed 68-29 in 2010 . Under the Secretary of Defense there is a very powerful Chief Information Officer of the Department of Defense, Teri Takai. Teri is responsible for developing strategic plans and to align with the department’s mission and the mission of the United States. The CIO of the Department of Defense interested me because of the decisions having to be made affect so many users. Every decision Teri makes has to be spot on and has to take in consideration, how it will hurt or benefit other departments or national security. The goal of the CIO is to unify the information management and to advance the technology vision of the department.

The Senior Management of the Defense Logistics Information Services (DLIS) has decided to update the previous risk management plan with a developing, new risk management plan. This new risk management plan will not only minimize the amount of risk for future endeavors, but will also be in compliance with regulations such as the Federal Information Security Management Act (FISMA), Department of Defense (DOD), Department of Homeland Security (DHS), National Institute of Standards and Technology (NIST), Control Objects for Information and Technology (COBIT), and Information Assurance Certification and Accreditation Process

Other security elements are in reference to data recovery, database administration, handling a breach in security and administrative security policies such as access procedure, employee transfer and excessive user access. As I assume the role of the chief security officer, database designer, database administrator, and chief applications designer this project is very important to the armed services and the Virgin Islands National Guard as we strive to provide global security.

Whitman, M. E., & Mattord, H. J. (2010). Management of information security (3rd ed.). Boston, MA: Course Technology/Cengage Learning.

The Department of Defense (DoD) is America 's oldest and largest government agency, with military traces dating way back to pre-Revolutionary times. The Department of Defense has since grown and evolved with the nation, hence becoming the national’s largest employer with over 1.4 million active duty soldiers, 1.1 million National Guard and Reserve forces, and 718,000 civilian personnel. With such a huge organization does come with a huge network, and security infrastructure network, and the burden to protect the information transferred or stored on that network. This means information is a strategic asset to the Department of Defense; it’s therefor the goal of this security policy to provide guidelines of implementing

The overall business for the U.S. army is simply to fight and win the nations wars by using a full range of operational tactics. One domain which the Army relies upon is cyber. Without the ability to communicate across boarder and into dark areas of the world, the U.S. armed forces, to include the U.S. Army would be hard pressed when devising plans to win. However, to remain the superpower the world looks to during times of strife, organizations such as the Army must define the technological edge, and ensure the organization keeps upholds that standard. To fulfill the requirements associated with defining the edge, decision makers must remain aware of change. Unfortunately change happens, and requires a reevaluation to ensure the organization has not, or will not become stagnant. If events were to occur, the organization would no longer be able to define what it is to be on the edge of technology. Moreover, the organization could also easily find itself in a situation where it is hard pressed to devise the plans required to win.

The DoD has the utmost standards when it comes to security awareness and ethics. As a defense contractor, reservist, and formal active duty Army officer, my duties have to abide by the fundamental principles listed in the 5500.7-R (Joint Ethics Regulation). The DoD has recognized the need for standardized training programs and standards by empowering the National Institute of Standards and Technology (NIST) to create guiding documents, and these documents both influenced and have been influenced by DoD training initiatives. High standard training helps to ensure that this level of commitment is reflected throughout the federal government.

When we reviewed the company’s other policies and procedures, we realized that what the client didn’t have were documented instructions about how to follow the Acceptable Use Policy. There was the stated policy, yet no procedures or specific processes in place to get the work done of protecting the company and its assets from security breaches or other improper uses. In short, the company had a policy that could not be enforced, which in turn opened them up to unnecessary risk and challenges in achieving the desired accountability and active defense culture.

A security policy is defined as the rules and regulations set forth by an organization, in this case, Booz Allen, guided by principals, standards, and guidelines for its effectiveness. (Kabay, & Robertson, 2009). Examples of security policies include acceptable use, network access, incident response, encryption, email, physical security, and mobile device. Booz Allen developed a framework for implementing security standards and controls for use of mobile devices (iOS) to protect against threats outlined in the National Institute of Standards and Technology (NIST) SP 800-88, R1, Defense Information Systems Agency (DISA), Security Technical Implementation Guide (STIG), and Defense Security Service and Industrial Security Field Operations (DSS ISFO) Manual, and National Security Agency (NSA/CSS 9-12). Once leaders define policy language and mandate compliance, user training oftentimes will follow where non-compliant employees consequently result in disciplinary action or even termination.

The purpose for an IT security policy is to provide “strategy, policy, and standards regarding the security of and operations in cyberspace, and encompasses the full range of threat reduction, vulnerability reduction, deterrence, international engagement, incident response, resiliency, and recovery policies and activities, including computer network operations, information assurance, law enforcement, diplomacy, military, and intelligence missions as they relate to the security and stability of the global information and communications infrastructure” ("Cyberspace policy RevIew", 2016).

Designing a working plan for securing the organization s information assets begins by creating or validating an existing security blueprint for the implementation of needed security controls to protect the information assets.  A framework is the outline from which a more detailed blueprint evolves.  The blueprint is the basis for the design, selection, and implementation of all subsequent security policies, education and training programs, and technologies.  The blueprint provides scaleable, upgradeable, and comprehensive security for the coming years.  The blueprint is used to plan the tasks to be accomplished and the order in which