Information Security Case Study

732 Words2 Pages
bulb-icon

Recommended: The importance of a disaster recovery plan

In an organization availability, confidentiality and integrity are the key components, which is suppose to guide information security policies that are established. Policies set will need to “operate in conjunction with the organizations established security policy” (Whitman & Mattord, 2012). This case study will detail the legal environment at an organization, such as laws, policies and regulations. This paper will also highlight how these factors impact the availability, confidentiality, and the integrity of the information and systems.
Policies are the guidelines and rules that make an organization run efficiently and successfully. They are defined as a set of procedures and guidelines that address systematic issues and how technological …show more content…

The purposes of these security policies include protecting employees, clients and data; setting guidelines and rules for users; roles and limitations of human re; administrators and security personnel responsibilities and defining the consequences for breaking the policies set. According to Canavan and Diver (2007), organizational policies can also define the company consensus baseline stance on security to minimize risk and track the compliance level with regulations and …show more content…

• Implementing and maintaining user log in credentials and passwords.
• Creating a business continuity plan and disaster recovery plan that is in compliance with the latest government laws and regulations.
• Setting the network infrastructure policies and workstation policies to ensure the integrity of the network.
Another aspect that organization must abide by is regulations. Regulations are orders that document what may or may not be done in an organization (US Department of Interior, Indians affairs, 2011). When regulations are implemented in a company, it enforces the security control of accessing certain information. An example of an implemented regulation is FERPA; which is a federal law that protects the privacy of student education records. The law applies to all schools that receive funds under an applicable program of the U.S. Department of Education (US department of education, 2015). A brief description of this regulation ensures the confidentiality, integrity, and availability of student information must be protected and maintained against unanticipated

Show More
Related

  • Building A Better Mis Trap Case

    739 Words  | 2 Pages

    In this case, a large health services organization (HSO) in Florida, that has a world-renowned AIDS treatment center had information breach of 4,000 HIV+ patient records, and the list was sent to newspapers, magazines, and the internet. Consequently, this issue was featured in every media vehicle in the world and as CEO, you are requested by the board of trustees to come up a better management information system (MIS) to resolve all information security issues or you will face termination. After hiring an undercover computer security consultant to help determine where the security leak came from, she quickly identifies numerous breaches in computer security and provides a report with the issues identified. The report furnished by the consultant revealed that facility had major problems with the MIS and the staff. In order to determine how to address the issues, the CEO must first answer the following questions: what law is being violated by the employees, why was this law enacted, what are the penalties for such violations, what are the penalties for sharing celebrity information, and should he be updating his resume and looking for another job (Buchbinder, 378).

    Read More

  • HIPAA, CIA, and Safeguards

    1633 Words  | 4 Pages

    Whitman, M., & Mattord, H. (2011). Reading & cases in information security: law & ethics. (2011 custom ed., p. 264). Boston, MA: Cengage Learning.

    Read More

  • Understanding Disaster Recovery and Business Continuity Plans

    567 Words  | 2 Pages

    A business continuity plan is a document that contains important information that your company or organization needs to stay running in event of an incident. “is specifically designed to get the organization's most critical services up and running as quickly as possible in order to enable the continued operation of the organization”

    Read More

  • Homeland Security: The Mission Of Homeland Security

    1035 Words  | 3 Pages

    Security helps the organization meet its business objectives or mission by protecting its physical and financial resources, reputation, legal position, employees, and other tangible and intangible assets through the selection and application of appropriate safeguards. Businesses should establish roles and responsibilities of all personnel and staff members. However, a Chief Information Officer should be appointed to direct an organization’s day to day management of information assets. Supporting roles are performed by the service providers and include systems operations, whose personnel design and operate the computer systems. Each team member must be held accountable in ensuring all of the rules and policies are being followed, as well as, understanding their roles, responsibilities and functions. Organizations information processing systems are vulnerable to many threats that can inflict various types of damage that can result in significant losses (Harris, 2014). Losses can come from actions from trusted employees that defraud the system, outside hackers, or from careless data entry. The major threat to information protection is error and omissions that data entry personnel, users, system operators and programmers make. To better protect business information resources, organizations should conduct a risk analysis to see what

    Read More

  • Cybercrime Case Study

    1543 Words  | 4 Pages

    Most people are familiar with Cybercrime or Computer Crime being crime carried out by use of computers or the Internet. With the growing use of the Internet it is no surprise to anyone that Cybercrime or Computer Crime has been on the rise and has been since the coming of the Internet and anyone can be a victim of cybercrime. Take for example in 2012, 7% of the U.S. population had their identity stolen from online (Harrell, Lang, 2013, pg. 1). There is no denying that the formation and growth of the Internet has had an impact on crime (Wall, 2011, pg. 8). The purpose of this paper is to explain and give an overview of the types of cybercrime, how law enforcement handle these types of crimes, and how prevent cybercrime.

    Read More

  • Effectiveness Of Organisational Policies And Procedures On Supporting Individuals And Their Social Networks Affected By Significant Life Events

    1096 Words  | 3 Pages

    (DHS, 2014). Policies are clear, understanding statements of how organisation intends to conduct their services. They provide a set of guiding principles to help with decision making. While procedures describe how each policy will be put into action in an organisation and outline the procedure:

    Read More

  • Consumer Law Essay

    1121 Words  | 3 Pages

    Business must ensure that they are up to date with the current laws and that they

    Read More

  • ABC Healthcare Case Study

    721 Words  | 2 Pages

    The ABC Healthcare is equipped with a poor network security which is against any law compliance that mandates the company to protect customers’ data and ensure data integrity. To protect trade secrets and private assets The ABC Healthcare needs to be in compliance with a number of laws established internationally for IT security practitioners to assist companies with their compliance when doing business over the internet and when dealing with sensitive information.

    Read More

  • Four Functions Of Management Case Study

    708 Words  | 2 Pages

    Some existing policies can act like barriers for mangers that wish to take a different approach of some policies. While policies are great for companies, they can get in the way of some of the internal factors of functions of management.

    Read More

  • Firewalls And Infrastructure Security

    1188 Words  | 3 Pages

    Security policies are a series of rules that define what traffic is permissible and what traffic is to be blocked or denied. These are not universal rules, and there are many different sets of rules for a single company with multiple connections. A web server connected to the Internet may be configured only to allow traffic on port 80 for HTTP, and have all other ports blocked. An e-mail server may have only necessary ports for e-mail open, with others blocked. A key to security policies for firewalls is the same as has been seen for other security policies, the principle of least access. Only allow the necessary access for a function, block or deny all unneeded functionality. How an organization deploys its firewalls determines what is needed for security policies for each firewall.

    Read More

  • Disaster Recovery Planning

    1326 Words  | 3 Pages

    In the disaster recovery process, extra attention should also be paid to training any new employees who will have a critical role in this function. Also, the plan should require having the appropriate people actually practice what they would do to help recover business function should a disaster occur. Some organizations find it helpful to do this on a quarterly or semi-annual basis so that the plan stays current with the organization’s needs. Business continuity planning and disaster recovery planning are terms companies sometimes use interchangeably. Although they can be considered related, they are not the same thing.

    Read More

  • Biometric Technology

    1204 Words  | 3 Pages

    Nowadays, the information is the most treasured asset in an organization, due to it along with the experience represents the input necessary to take appropriate decisions and consequently to have success in the business. Almost all the information and knowledge related with the processes business, goods and services offered by a company, is processed, managed and stored through technology and information systems, thus the security of information has become increasingly important and plays a critical role in the enterprise government.

    Read More

  • The Importance Of Network Planning

    1374 Words  | 3 Pages

    A critical part of network planning involves setting up of security mechanisms. Deploying the network with security configuration provides superior visibility, continuous control and advanced threat protection across the extended network. Additionally, security procedures define policies to monitor the network for securing critical data, obtain visibility, mitigate threats, identify and correlate discrepancies.

    Read More

  • Information Security

    2693 Words  | 6 Pages

    The first thing that we must consider about Information Security is that there is not a final destination at which we can arrive. IT Security is an ongoing set of processes and activities that requires attention and expertise on a daily basis. It is important to understand that systems are not secured by themselves and it is our responsibility to maintain and improve them periodically as required. It is of vital importance to establish the appropriate mechanisms and requirements in order to support the company’s CIA triad. The following report will provide you guidance about auditing and hardening techniques applied though the 7 Domains by utilizing IT Security Best Practices.

    Read More

  • Computer Crimes Employees Use The Internet At Work

    1407 Words  | 3 Pages

    One particular crime that could be committed by employees who use the internet at work is hacking. Hacking is one of the most well-known types of computer crimes, in this context, the term refers to the unauthorized access of another’s computer system (HG.org Staff, 2015). This means that if the employee in not allowed to use the internet, for personal use, than there is a possibility that they could get charged for such crime. Because the policy will state they do not have the authority to access the organizations computer system for personal use. In addition, they must know that all use of computers systems while at work will be monitor, including e-mails. Piracy and cyber terrorism are other crimes that one can face when using a computer

    Read More

More about Information Security Case Study

Open Document