Nt1330 Unit 3

The church required that the workstations be replaced as they are no longer supported by the hardware manufacturer. The workstations operating Windows XP can no longer receive a software patch and are no longer supported by Microsoft. These workstation are extremely vulnerable to attack. Wireless connectivity through the church campus was a requirement as the church was to be able to access information from multiple locations. Setting up hardware to maintain and secure all data and information. The sponsor liked our team’s suggestion to migrate them from a peer to peer network environment to a server domain environment. With all of these upgrades and updates, network security needed to be addressed so the installation and setup of a firewall became a requirement. The

Having secure mobile and IP address to it is one of the major important factors as to avoid hacking data. (VoIP) is majorly defined as the ability for faxing, phone calls etc. There is also a need of scalable support over IP which routes and optimizes the mobile needs over secured IP and its protocols. There are also communication insecurity in terms of protection. Some of them are protocol errors, cryptographic errors and implementation errors

Patients records are confidential. BHO can adopt the Need-to-know security principle so that there are certain restrictions in accessing patient records. BHO may want to implement certain rights to be given to their doctors, nurses, healthcare assistants and administrative staff and this may prevent unauthorised access to other patient’s records. For example, administrative staff are only granted to access in booking new appointment and collection payment but it’s restricted to access other information such as medical records. Doctors are granted to view patient’s medical records but it is not allowed to make any amendments.

Servers often contain sensitive data. Employee information, customer information, and proprietary business data are just a few examples of the types of sensitive data often secured on company servers. Thus, it is critical that servers are secure from infiltration and attack. One of the best ways to secure a server from attack is to maintain system updates and patches.

Some security risks involved with conducting business online are imposters, eavesdroppers and thieves. Also, there are crackers or hackers, which are people who write programs and manipulate technologies to obtain unauthorized access to computers and networks. The elements of computer security are secrecy, integrity and necessity. Secrecy is protecting against unauthorized data disclosure. Integrity is preventing data from being modified by someone who is unauthorized and ensuring that the contents of emails aren’t changed before they get to he recipient. Necessity is preventing data delays or denials. It is important to establish a security policy to protect assets, to define acceptance and unacceptable behavior and to review physical and

I further request that I live as near as possible to my primary residence in order that I may visit with friends and neighbors to the degree my agent believes that I will benefit from such relationships. I wish to return home as soon as reasonably possible after any hospitalization or transfer to convalescent care. If my agent determines that I am no longer able to live in my home, I wish that my agent considers alternatives to convalescent care which will permit me as much privacy and autonomy as possible, including such options as placing me in an assisted living facility or board and care

Companies are prone to more threats to their information now more than ever before. With employees having the capabilities to access the company’s network both in and out of the office, increases the potential that information or the access to information may end up in the wrong hands. It is because of these threats that companies create and enforce network security policies.

This is extremely important because there a lot of viruses out that can damage a network. Any downloaded software like shareware can be lethal to a network. The best way to keep this from happening is by installing a virus software on the server that will detect anything before it goes through the network. Also each network station should have a virus program as well because many personnel will bring files from home and try to access them at work. Plus have procedures for employees so that if they accidentally open a file that contains a virus they should not do anything further and just take the computer off the network and let an IT professional handle the situation from there. This is especially important on emails as well. Whenever an employee sees a suspicious email with a file attached to it, don’t have them open it but just delete it and notify the IT professional immediately. Having these procedures can prevent any damage to the company’s network and help protect sensitive information as well.

Information Technology (IT) managers are constantly tasked with evaluating their organization’s overall security posture and reporting the greatest vulnerabilities to leadership. Senior management is often surprised to hear that the greatest vulnerability within an organization is not a misconfigured firewall or a virus being forwarded across an internal e-mail server, but rather a human being. When compared to a piece of hardware or software, a human user is easily the single most targeted weakness within an organization.

The potential malicious and attack which are likely to invade the company's network are data modification or manipulation, eavesdropping, sniffer attack, Virus, Worm, Trajan, password attack, a dictionary attack, brute force attack, IP address spoofing/IP spoofing/identity spoofing and denial of Service.

Do not create unnecessary business risk to the company by misuse of the network, internet, or email services.

The above-mentioned threats and vulnerabilities present several different risk factors to the organization. The first risk that deserves consideration if the loss of data from the threat of a successful phishing attack or because of credentials that weren’t properly deactivated. This has the potential to expose sensitive company information or even introduce malware to the network. Depending on the credentials that the attacker was able to obtain, this could be damaging to the company in the form or copyright violations and potentially compromise the security of the devices used in the field. Closely linked to this is the risk of lost business in the form of time and money should an event take place. An example of this would be a successful ransomware attack or even a natural disaster. If that were to occur, these events could bring daily operations to a standstill and even lead to financial ruin if proper procedures are not in place. Should a ransomware attack successfully encrypt a server that has no proper offsite backup in place, the organizations only hope would be that the attacker would

Train employees on security computer programing on how to detect spyware on their systems. Also do a security scan of the network for possible threats of attacks. Monitor outbound traffic of their networks connections to see if it deviates from normal operations. Keeping operating systems updated can make it hard for someone on the outside to breach the databases for intentional and unintentional access.

As an example I would like to describe my experience working at a relatively small fruit import company. The management of this firm gets information, makes orders, and carries almost all negotiations via the e-mail. "To minimize the risk of any disclosure or loss of confidential data, it is important to understand where the risks are, and implement office management practices and appropriate technology to ensure all of your data remains confidential and secure," advises article IDS: Classification (2002, December4). The potential loss or disclosure of information could occur through various ways: vulnerabilities of operation systems (mostly Microsoft products), vulnerabilities of e-mail software, viruses and malicious software, and weak passwords. It is relatively easy to protect electronic information in this case, but it does take some time and effort, which could be difficult for managers, who do not have an expertise in computers.

The approach that I will use to mitigate these information Security risks within the organisation are listed as follow, I will setup password inside the organisation, password always is the basic for IS security, then setup virus protection software and also media backup in case technical failure. A firewall is also necessary, the stronger it is the better the security. I will also conduct employee education and ethic training class within the organisation. Finally make a better control over the workstation.