Using Roles Paper Week 3 Individual

Confidentiality is the protection of information from unauthorized access. This is the assurance that information provided has not been made known to unauthorized persons, processes or devices. The application of this security service suggests information labeling and need-to-know imperatives are core aspects of the system security policy. Information, in today’s world, has value and everyone has information they wish to keep secret. Information such as credit card details, trade secrets, personal information, government documents, and many more. It was stated (Securitas Operandi™, 2008) that, we are bound to keep many secrets – corporate, staff, and personal secrets. We must keep this confidential information under wraps and earn the trust of employers, colleagues, and regulators every day. Mechanisms to enforce this include cryptography, which is, encrypting and decrypting data, access controls such as

It is not uncommon to find various organizations complaining about security flaws in their information systems. Failing to prevent or mitigate the security flaws may lead to system breakdown, errors, and loss of crucial information. This is why it is important for users of information systems to find the right solutions that can help counter and mitigate security flaws. One common problem with security flaws connected with information systems or networks is that the security flaws occur in multiples. Technological advances have, fortunately, made it possible for people and organizations to prevent and detect such security flaws using security strategies. Layered Security and Defense in Depth are two strategies that can help prevent attacks and protect information systems against security flaws. The two strategies are similar but are based on completely two different concepts. This paper compares and contrasts the Layered Security and Defense in Depth Strategies by explaining how each of the two functions. Additionally, the paper includes an explanation about the advantages and disadvantages of the two strategies.

Wm. Arthur Conklin, G. W. (2012). Principles of Computer Security: CompTIA Security+™ and Beyond (Exam SY0-301), Third Edition. In G. W. Wm. Arthur Conklin, _Principles of Computer Security: CompTIA Security+™ and Beyond (Exam SY0-301), Third Edition_ (p. Chapter 20). McGraw-Hill Company.

Company must also develop a clear structure for granting employees access to sensitive information. Not all employees need such data in order to fulfill their everyday job responsibilities. For those who need admission to sensitive information, a strong authentication mechanism must be developed, which cannot be bypassed. This will ensure that only authorized users are accessing compromising data.

Every organization must have adequate control mechanisms in place to help protect sensitive information from the distribution or transmission outside the organization, inappropriate disclosure, and control of how the information accessed is used. Companies should have policies in place that outline the course of action to take should inappropriate usage or disclosure of data be

Any enterprise has to pay special attention to computer security. Computer security is a field that is concerned with the control of risks related to computer use. A primary focus should be on the external threats to the computing environment. In enterprise with branches cross country, it is important to allow information from "trusted" external sources, and disallow intrusion from anonymous or non-trusted sources. In a secure system, the authorized users of that system are still

Laudon, K. L. a. J. Management Information Systems, 12/e for DeVry University (12th ed). Pearson Learning Solutions. Retrieved from http://devry.vitalsource.com/books/9781256399933/id/ch02fig07

Dougherty, C., Householder, A., & Houle, K. (2002). Computer attack trends challenge Internet security. Computer, 35(4), 0005-7.

Technology has grown tremendously over the past few decades. Everyday businesses, governments, and everyday people rely on technology for things from banking to communicating with loved ones and business associates. Disrupting this technology can cause major losses monetarily and in the sense of information. According to Information Security Curriculum Creation: A Case Study, “A survey of undergraduate degree programs in Computer Science, Information Technology, Management Information Science, and others show a lack of emphasis on security issues in their curriculum.” There is a strong need to secure and protect information for many, many reasons and as such it is important that an undergraduate curriculum provides a comprehensive approach to teaching information security concepts to its students.

In this paper we will provide an overview and history of computer and network security. We will identify one current use of computer and network security and provide an example of this concept in practical use. A discussion of attitudes towards computer and network security will be made and justifications towards the attitude. We will explain the fundamental strengths and weaknesses toward computer and network security and will provide expert views regarding computer and network security.

As the use of computers, databases, and technology in general, security has grown to be a powerful tool that has to be used. The threat of outside sources intruding and exploiting crucial information is a threat that is present on a daily basis. As a part of creating and implementing a security policy, a user must consider access control. Access Control is a security tool that is used to control who can use or gain access to the protected technology. Access control security includes two levels; logical and physical. Though database intrusions can happen at any moment, access control provides another security barrier that is needed.

Designing a working plan for securing the organization s information assets begins by creating or validating an existing security blueprint for the implementation of needed security controls to protect the information assets.  A framework is the outline from which a more detailed blueprint evolves.  The blueprint is the basis for the design, selection, and implementation of all subsequent security policies, education and training programs, and technologies.  The blueprint provides scaleable, upgradeable, and comprehensive security for the coming years.  The blueprint is used to plan the tasks to be accomplished and the order in which

In the event that, regardless, security operations must be off- stacked to parts running on an untrusted stage, the configuration ought to force great alert on how the reckoning and it’s yield are dealt with. Normal shortcomings identified with customer trust live in different parts of the framework, yet have a tendency to impart a sensibility. A planner may Verify all information got from an untrusted customer are appropriately approved before transforming.

No matter how large or small the organization is, there is a need to have a plan to ensure the security of the information assets, such a plan is often referred to as a security program by information security professionals. The process of creating a security program initiate and emphasize on thinking holistically about the organization’s security. A security program provides the framework for keeping the company at a desired security level by assessing the risks being faced, decision on how it is mitigated, and planning to keep the program and security practices up to date.

A Report submitted to Prof. J.M. Shah for the partial fulfillment of the requirements for the subject Information Systems for Management under NMIMS University