Reference no: EM133696980
Homework: IP Access Controls & Security Mechanisms
Throughout this course, you will be working with a scenario in which some basic background information is provided about a consulting firm. This scenario and information is typical in many companies today. You are tasked to select a company that you are familiar with that is facing a similar situation. The company can be real or fictitious, but the framework and problems that it faces should be similar. The homework that you complete is based on the problems and potential solutions that similar companies may face. The end goal for the homework is to analyze the problems that the company faces with respect to the upcoming audit and to provide guidance on how it can provide security for its infrastructure.
Description
Create the following section:
The case study company has provided you with the flexibility to identify many different information systems that are used by the employees. Some systems need strict access control, whereas others should be available to everyone. What access control methods need to be employed for the various systems? How can the company protect the new consultant network while providing the protection of data that the stakeholders and customers require?
In addition, you have been asked to describe 2 access control mechanisms and consider whether they can be used in the organization. Describe single sign-on (SSO) and virtual private network (VPN) technology and whether they can be used in the company.
Complete the following section:
A. Access Controls and Security Mechanisms
1. For each of the applications and systems that were described in Individual Project 2, describe the access control mechanisms that are needed for each.
2. Describe how the new expanded network can be protected through access control.
3. Describe SSO and VPN technology, and discuss whether they can be used in the company.
B. Name the document "CS651_FirstnameLastname_IP3.doc."
The template document should follow this format:
A. Security Management Document shell
1. Use Word
2. Title page
I. Course number and name
II. Project name
III. Your name
IV. Date
3. Table of Contents (TOC)
I. Use an autogenerated TOC.
II. This should be on a separate page.
III. This should be a maximum of 3 levels deep.
IV. Be sure to update the fields of the TOC so that it is up-to-date before submitting your project.
4. Section headings (create each heading on a new page with "TBD" as content, except for Week 1)
I. Part I: Introduction to Information Security
i. This section will describe the organization and establish the security model that it will use.
II. Part II: Security Assessment
i. This section will focus on risks that are faced by organizations and how to deal with or safeguard against them.
III. Part III: Access Controls and Security Mechanisms
i. This section examines how to control access and implement sound security controls to ensure restricted access to data.
IV. Part IV: Security Policies, Procedures, and Regulatory Compliance
i. This section will focus on the protection of data and regulatory requirements that the company needs to implement.
V. Part V: Network Security
i. This section combines all of the previous sections and gives the opportunity to examine the security mechanisms that are needed at the network level.