Windows Access Controls

1.3 – All members of staff have different responsibilities and levels of authority when processing customer information. Because dealing with data relative to recruitment, compensation and management is highly sensitive. Therefore only employees with given clearance can access and update certain data to ensure they maintain a professional attitude as if there was not any levels of authority then the information could be prone to being misused to commit fraud and other violations.

HR records encompass a wide range of data relating to individuals working in an organisation, which may be stored in a variety of media, such as computer database or paper files. There and advantages and disadvantages to both media

4. Within the organisation there will be groups of people or teams which work toward

3. Why is it important for HR management to transform from being primarily administrative and operational to becoming a more strategic contributor?

Each group (Group A, Group B1, Group B2 and Group D) is made up of sub-headings and questions or “statements of competence”.

Access control refers to the mechanisms that identify who can and cannot access a network, resource, application, specific action.

Issue one. Based on the premise that Richman has 5,000 employees throughout the main office and several branch offices, you must research solutions and detail the appropriate access controls including policies, standards, and procedures that define who users are, what they can do, which resources they can access, and which operations they can perform on a system.

b) Examine your workplace with reference to its compliance with the legal and ethical requirements of holding, using and accessing data………………………………………….……….

The operating allows configurations in which MLO’s as well as processor are only able to view their own files. Everyone is required to adhere to the clean desk policy, which means if you are leaving your desk you must but away all borrower documentation in a locked draw, and lock your computer. We also

Called and got permission from Steven to make the permission changes Simone specified. Confirmed she had access to the Payroll folder. Created a new Personnel listing RW group and added Simon to the group. Locked down the vacation and reimbursement folder and created an RW group for both. Added Simone to both groups. Called Simone and had her log off and back on. Confirmed her permissions were

31. __________ groups are nonsecurity-related groups created for the distribution of information to one or more persons. Distribution

Employee logins for the file server can be setup either with User Accounts or the server management tool. I would recommend file directories also be assigned with group policy so that access to some files could be limited to some users, for instance only admin and accounting need access to accounting files and only upper management and HR need access to Human Resources shared files, etc.

Roles are normally created for the varying business roles or functions. Performance of certain activities is limited to certain job roles or functions. Staff members given the task to undertake such activities are given user accounts unique to them to undertake these roles (Ferraiolo, Kuhn & Chandramouli, 2003). This is normally under the discretion of the immediate supervisor through dialogue with the overall supervisor of a particular division or department.

Access control has been in use before the growth of the technology world. It could involve a simple action as locking a door. A person locks a door to prevent entry to those who are not allowed or authorize to do so. The same can be said about the security involving databases and the controlling of who can have access and what can be accessed. As far as database security is concerned, there are various categories that are involved in access control. The four main categories of access control include: Discretionary, Mandatory, Role-based, and Rule-based access control.

Access matrix model: Provides object access rights (read/write/execute, or R/W/X) to subjects in a discretionary access control (DAC) system. An access