SEC 360 Week 1 You Decide Assignment: Sunshine Machine Works

Document Content and Description Below

SEC 360 Week 1 You Decide Assignment: Sunshine Machine Works Week 1 You Decide: Sunshine Machine Works The company of Sunshine machine works has expanded i... ts infrastructure from three computers and ten employees, to over 100 employees and more than fifty computers with two servers. There is an importance of implementing new information use security policy for ensuring that the employee and the propriety information remains secured while they continue to expand. Wilma Stone who is the CEO has identified the fears that she has for the network expansion and file sharing due to certain proprietary data being compromised for being centralized. User ids and passwords need to be assigned to each authorized user for controlling access to the expanding network. There should be strict password policy for ensuring passwords meet the criteria as well as the complexity and guard against access that is unauthorized to sensitive networks and information. Hence on all IT assets of the company, this policy will be written and enforced. Additionally, a user access agreement will have to be signed by all of the employees. So, this will establish the guidelines and the terms of computer usage for the employees of the company. In the agreement, he company policy is outlined to all employees and what consequences that employee(s) will face if the agreement is breached. Then this leads us to the next issue with expansion is access limitation of data to those that need to know. The CFO has identified the next issue of the company which is access limitation to the company’s financial data. For data to be secured there needs to be limited access to selected key individuals. Now that the company is expanding and centralizing its files, there needs to be a way to ensure for this to remain the same. For ensuring that individuals need access to certain data they need to have it, they can get this data by establishing directory services, or user access rights management. There is a level of added security to the company and its information by limiting the access of user(s) to only what they need to complete their jobs. Then this leads us to the final issue of the company that allows users to also access some personal data by using the workplace network. Gary Thomas who is the GM of the company has expressed the need for allowing employees to be able to access their personal email and other personal information while using the company network. It will add productivity and morale to the employees as this poses a certain level of risk to the company. Therefore, there is a need for strict monitoring policy that needs to be established and implemented to ensure that the company data is not given to or shared with unauthorized sources and also ensuring that personal email is not a given area for viruses and malware to enter the company’s network. There will be time limitation to when personal emails can be accessed per day for ensuring that productivity is not compromised. Sunshine Machine Works Company wants to ensure that the company’s expansion is done with a strong foundation of security to the data in mind while still allowing some degree of flexibility to employees for accessing personal data on the company network. There needs to be strong degree of security for ensuring the appropriate users still has access while creating user ids and passwords policies for logging on the network and the security file data by implementation of directory access and rights management tool to user access. The company can still allow access to personal email while ensuring that there is limitation to access personal email and monitoring for appropriate use. Thus, all of these security measures should create for a strong and solid information use of security policy at Sunshine Machine Works. [Show More]

Last updated: 11 months ago

Preview 1 out of 3 pages