CASE : You work for a national healthcare society. Your society regularly collects information from hospitals and clinics nationwide regarding both inpatient and outpatient procedures. This data is stored in a large database, which is accessible by members of hospitals or clinics who contribute any information. Additionally, your society performs other member services, such as organizing a national conference and publishing a journal of information articles relevant to the society. Assume the society headquarters is in St. Louis, Missouri and leases floors in a high-rise multitenant office building located center city. The servers holding the national database of procedures occupy most of one of the leased floors. Other floors hold offices for the elected officers and hired staff, a library, and meeting rooms. Each floor has either a receptionist or guard (on the server floor). Except for the server floor, society members and the officers may access the building and society floors. The society’s website and access to the database is all done over the worldwide web, which the society contracts through a national provider. Other functionality including security is standard for typical multitenant office buildings.   ANSWER: Base on the case,  design a comprehensive set of user authentication policies and procedures.  The authentication policies and procedures need to protect data/information as well as equipment and intellectual property. Which means you must specify more than just how to create a password, i.e. how will you enforce these policies, other factors specific to creation, maintenance, storage, etc. of specified authentication mechanisms.

CASE :

You work for a national healthcare society. Your society regularly collects information from hospitals and clinics nationwide regarding both inpatient and outpatient procedures. This data is stored in a large database, which is accessible by members of hospitals or clinics who contribute any information. Additionally, your society performs other member services, such as organizing a national conference and publishing a journal of information articles relevant to the society.

Assume the society headquarters is in St. Louis, Missouri and leases floors in a high-rise multitenant office building located center city. The servers holding the national database of procedures occupy most of one of the leased floors. Other floors hold offices for the elected officers and hired staff, a library, and meeting rooms. Each floor has either a receptionist or guard (on the server floor). Except for the server floor, society members and the officers may access the building and society floors.

The society’s website and access to the database is all done over the worldwide web, which the society contracts through a national provider. Other functionality including security is standard for typical multitenant office buildings.

ANSWER: Base on the case,  design a comprehensive set of user authentication policies and procedures.  The authentication policies and procedures need to protect data/information as well as equipment and intellectual property. Which means you must specify more than just how to create a password, i.e. how will you enforce these policies, other factors specific to creation, maintenance, storage, etc. of specified authentication mechanisms.