1.2  Differentiate among types of security policies.

1.3  Describe the various parts of an effective Information Security Policy.

Read the instructor’s biography and post your own.

Read Ch. 2–5 of Information Security.

Read this week’s Electronic Reserve Readings.

TestOut LabSims

Review the TestOut LabSim Security Pro, Sections 1.1, 4.0, 4.1, and section 4.6.

Toolwire® SmartScenario: Information Security/Security Policies

Save a copy of your assessment.

Post your Word document as an attachment.

Introduction to the Information Security Policy

·         Company 1: The Bloom Design Group is a company that offers interior design services to businesses and individuals throughout the world. Bloom has a corporate office in New York and a second office in Los Angeles. The company’s website features a virtual decorating tool, which offers clients the chance to play with different color and design schemes. This tool allows their clients to get an idea of what a design project would look like once it is completed, before actually making color and design decisions. The website also gives interior designers access to their client files and company style guides, as well as create the ability to electronically process orders for design materials and furniture. The designers use a secure login and a password to gain access to the website and its features. The company’s workforce spends all its time working remotely and accessing the corporate network using a secure VPN.

·         Company 2: Sunica Music and Movies is a local multimedia chain with four locations. Each store has been acting independently of one another and has difficulty coordinating customer sales from one store to another based on inventory. Because of poor communications, revenue and customer base have been lost due to jumbled inventory from store to store, decentralized accounting, and no Internet-based commerce. With the successful implementation of a WAN solution, all stores will have the ability to access a centralized database for inventory and dynamically reorder stock based on sales. Each location will tunnel all financial transactions through a central accounting package, eliminating bookkeeping errors, and centralizing the company finances. All transactions and customer inventory browsing will be done through a web interface and custom intranet website. To meet their need for an Internet customer base, web servers will be located in their data center and will tie in to the company’s accounting and transaction servers to provide real-time sales and inventory information to customers.

Complete the Introduction portion of the Information Security Policy. Include the following:

·         An overview of the company

·         The security goals to be achieved

Refer to the Introduction Template in Appendix C for the correct format for this assignment. Customize it meeting university standard. Our standard is using APA format.   Every paper must come with opening and closing statements plus include appropriate references and add intext citation if paraphrase anything

2.1  Summarize the concept of a trusted computing base (TCB).

2.2  Explain the ring of trust model.

2.3  Describe the Trusted Computer Security Evaluation Criteria.

Read this week’s Electronic Reserve Readings.

TestOut LabSims

Review the TestOut LabSim Security Pro, Section 1.3.

Toolwire® Smart Scenario: Trusted Computing Base

Save a copy of your assessment.

Post your Word document as an attachment.

3.1  Outline the steps involved in developing a Business Continuity Plan.

3.2  Describe the key elements of a Disaster Recovery Plan.

TestOut LabSims

Review the TestOut LabSim Security Pro, Sections 4.2 and 10.2.

Toolwire® Smart Scenario: Business Continuity/Disaster Recovery

Save a copy of your assessment.

Post your Word document as an attachment.

Disaster Recovery Plan

·         The key elements of the DRP

·         The plan for testing the DRP

Refer to the Disaster Recovery Plan Template in Appendix D for the correct format for this assignment. Customize it meeting university standard. Our standard is using APA format.   Every paper must come with opening and closing statements plus include appropriate references and add intext citation if you paraphrase anything.

4.1  Describe the different types of cyber crime.

4.2  Identify the risks and impacts of cyber crime.

Read this week’s Electronic Reserve Readings.

TestOut LabSims

Review the TestOut LabSim Security Pro, Sections 3.1, 6.2, 6.10, 7.3, 8.2, and 9.1.

Toolwire® SmartScenario: Cyber Crime

Save a copy of your assessment.

Post your Word document as an attachment.

5.1  Distinguish between logical and physical security.

5.2  Outline the major categories of physical security threats.

5.3  Outline the types of controls needed for secure operations.

5.4  Identify the parts of a Physical Security Policy.

TestOut LabSims

Review the TestOut LabSim Security Pro, Sections 1.1, 4.1 and 5.1.

Toolwire® SmartScenario: Security and Threats

Save a copy of your assessment.

Post your Word document as an attachment.

Physical Security Policy

·         Security of the facilities

o    Physical entry controls

o    Security offices, rooms, and facilities

o    Isolated delivery and loading areas

·         Security of Information Systems

o    Workplace protection

o    Unused posts and cabling

o    Network/server equipment

o    Equipment maintenance

o    Security of laptops/roaming equipment

Refer to the Physical Security Policy Template in Appendix E for the correct format for this assignment. Customize it meeting university standard. Our standard is using APA format.   Every paper must come with opening and closing statements plus include appropriate references and add intext citation if you paraphrase anything

6.1  Differentiate between the principle of least privilege and the principle of separation of duties.

Read this week’s Electronic Reserve Readings.

TestOut LabSims

Review the TestOut LabSim Security Pro, Sections 2.4, 4.1 and 4.8.

Toolwire® SmartScenario: Least Privilege/Separation of Duties

Save a copy of your assessment.

Post your Word document as an attachment.

7.1  Describe how access control and authentication methodologies secure systems.

7.2  Explain the concept of cryptography.

7.3  Outline the roles of packet-filtering routers and firewalls and how they protect a network.

TestOut LabSims

Review the TestOut LabSim Security Pro, Sections 2.0, 3.0, and 6.5.

Toolwire® Smart Scenario: Access Control/

Cryptography

Save a copy of your assessment.

Post your Word document as an attachment.

Access Control Policy

·         User enrollment

·         Identification

·         Authentication

·         Privileged and special account access

·         Remote access

Refer to the Access Control Policy Template in Appendix F for the correct format for this assignment. Customize it meeting university standard. Our standard is using APA format.   Every paper must come with opening and closing statements plus include appropriate references and add in-text citation if you paraphrase anything

8.1  Describe the two main classes of intrusion.

8.2  List the characteristics of a good intrusion detection system.

Read this week’s Electronic Reserve Readings.

TestOut LabSims

Review the TestOut LabSim Security Pro, Section 7.5.

Toolwire® Smart Scenario: Intrusion

Save a copy of your assessment.

Post your Word document as an attachment.

9.1  Distinguish among several types of malicious software.

9.2  Create an Information Security Policy.

TestOut LabSims

Review the TestOut LabSim Security Pro, Sections 4.1 and 8.1.

Toolwire® Smart Scenario: Malware

Save a copy of your assessment.

Post your Word document as an attachment.

Information Security Policy

·         For the Network Security Policy portion, include the following:

o    Network access

o    Network security control devices

·         For the Executive Summary portion, do the following:

o    Provide 3 to 4 paragraphs describing the following:

·         The goals of the security plan

·         Assumptions

·         Project constraints

o    Your summary should be written in a concise and clear manner that summarizes your policy for readers.

Compile and submit all previous weeks’ sections with this week’s Network Security Policy and Executive Summary sections as a final Information Security Policy (Appendix B).

Refer to the Network Security and Executive Summary sections of the Information Security Policy Template in Appendix B for the correct format for this assignment.  Customize it meeting university standard. Our standard is using APA format.   Every paper must come with opening and closing statements plus include appropriate references and add intext citation if you paraphrase anything.