Reference no: EM131299702
Assignment: Evaluating Access Control Methods
Imagine you are an Information Systems Security Specialist for a medium-sized federal government contractor. The Chief Security Officer (CSO) is worried that the organization's current methods of access control are no longer sufficient. In order to evaluate the different methods of access control, the CSO requested that you research: mandatory access control (MAC), discretionary access control (DAC), and role-based access control (RBAC). Then, prepare a report addressing positive and negative aspects of each access control method. This information will be presented to the Board of Directors at their next meeting. Further, the CSO would like your help in determining the best access control method for the organization.
Write a three to five page paper in which you:
1. Explain in your own words the elements of the following methods of access control:
a. Mandatory access control (MAC)
b. Discretionary access control (DAC)
c. Role-based access control (RBAC)
2. Compare and contrast the positive and negative aspects of employing a MAC, DAC, and RBAC.
3. Suggest methods to mitigate the negative aspects for MAC, DAC, and RBAC.
4. Evaluate the use of MAC, DAC, and RBAC methods in the organization and recommend the best method for the organization. Provide a rationale for your response.
5. Speculate on the foreseen challenge(s) when the organization applies the method you chose. Suggest a strategy to address such challenge(s).
6. Use at least three quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.
Your assignment must follow these formatting requirements:
• Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
• Include a cover page containing the title of the assignment, the student's name, the professor's name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.
The specific course learning outcomes associated with this assignment are:
• Analyze information security systems compliance requirements within the User Domain.
• Use technology and information resources to research issues in security strategy and policy formation.
• Write clearly and concisely about topics related to information technology audit and control using proper writing mechanics and technical style conventions.
|
Which of these plans causes you the greatest concern
: Your financial plan should include plans for managing your liquidity, financing, insurance, investments, and retirement planning. Which of these plans causes you the greatest concern? Which of these plans will be most difficult for you to achieve?..
|
|
Compute the price and quantity variances
: Compute the price and quantity variances - The materials were purchased from a new supplier who is anxious to enter into a long-term purchase contract. Would you recommend that the company sign the contract? Explain.
|
|
Profile all brands in category in terms of pricing strategy
: Choose a product category. Profile all the brands in the category in terms of pricing strategies and perceived value. If possible, review the brands' pricing histories.
|
|
Estimating the purchase price
: At the acquisition date the equity of the subsidiary was as follows: Share capital 300, retained earnings 250. When acquiring and estimating the purchase price, parent estimated Sub1 having good future business expectations. During the valuation p..
|
|
Compare the positive aspects of employing a mac and dac
: Compare and contrast the positive and negative aspects of employing a MAC, DAC, and RBAC. Suggest methods to mitigate the negative aspects for MAC, DAC, and RBAC.
|
|
How effectively brand mixed matched marketing communication
: Pick a brand and gather all its marketing communication materials. How effectively has the brand mixed and matched marketing communications?
|
|
What do you think is the main point of this video clip
: How might you change your process of developing a financial plan as a result of watching this video clip?
|
|
Retention strategies at three different companies
: Research recruiting and retention strategies at three different companies. What distinguishes one company from another in this area? Are strategies such as signing bonuses, tuition reimbursement, and business casual dress codes standard for the ne..
|
|
The role of the internet in building brands
: What do you see as the role of the Internet in building brands? How would you evaluate the Web site for a major brand-for example, Nike, Disney, or Levi's?
|