To create a company-wide security strategy, an architectural firm has engaged you. Each of the firm's eight employees has a networked desktop computer. Management has emphasized the importance of ease of use and the limited time available for staff training. To what extent should policy reflect the degree of security in effect at any given time?

To create a company-wide security strategy, an architectural firm has engaged you. Each of the firm's eight employees has a networked desktop computer. Management has emphasized the importance of ease of use and the limited time available for staff training. To what extent should policy reflect the degree of security in effect at any given time?

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter12: Protection Mechanisms

Section: Chapter Questions

Problem 5E

See similar textbooks

Similar questions

In order to design a company-wide security strategy for an architectural business with eight workers, each of whom has a networked desktop computer, you've been hired. Management has placed a high value on user friendliness, given the short amount of time allotted for new hire training. What level of protection should be reflected in the policy?
An architectural firm of eight employees, each with a networked desktop computer, wants you to develop a security policy for the company. Management has emphasized the ease of use is paramount, and little time is available for training. What level of security should policy reflect?
To learn more about your institution's security rules, look them up on the intranet or website. Is there a corporate security policy somewhere? Where have you come across security rules that are tailored to address a particular problem? What agency or department is in charge of issuing or coordinating all of these policies, or are they dispersed across the organization? Use the framework provided in this chapter to determine whether or not the policies you found in the preceding exercise are complete. What are the omissions in these areas?
It's possible that you have an opinion on the most recent security incident that made news because it included access control or authentication. More specifically, how did it influence the day-to-day operations of the company? How much cash has been squandered by the company?
The production of an alarm for each action is the first step in the operation of one category of intrusion detection system (IDS). Over time, the administrator will make adjustments to the settings of the intrusion detection system (IDS) to guarantee that normal, harmless actions will not send off alerts. What are the advantages of employing this style for an IDS, and what are the disadvantages?
Give specifics about a current security breach in the news concerning access control or authentication. Has it had a negative influence on the company's day-to-day operations? Is there any specific harm that the firm has suffered as a result of this?
It can be beneficial to look at an example of a recent security breach that included access control or authentication. Do you believe that it has had an effect on the business practises of the company? Are you able to provide me with detailed information on whether or not the company has experienced any losses?
There is a need for an Intrusion Detection System. Read the given parameters and write your decision about the type of intrusion detection system you would use to fulfill the requirements; Requirements: The intrusion detection system must - Monitor system activities for signs of suspicious behavior. - Analyze traffic and log malicious behavior - Provide visibility into what's happening on your critical security systems - Help to identify threats inside the network perimeter