Reference no: EM132695603
Project Part 9: Secure Windows Applications Policy
Scenario
One of the security improvements for the Always Fresh IT environment is to ensure all workstations and servers run secure applications. The company needs policies that set security requirements for the software. These policies will guide administrators in developing procedures to ensure all client and server software is as secure as possible.
Specifically, you will write two policies to ensure web server software and web browsers are secure. Your policy statements will describe the goals that define a secure application.
Consider the following questions for web server software and web browsers:
1. What functions should this software applicationprovide?
2. What functions should this software applicationprohibit?
3. What controls are necessary to ensure this applications software operates asintended?
4. What steps are necessary to validate that the software operates asintended?
Tasks
Create two policies-one for web server software and one for web browser clients. Remember, you are writing policies, not procedures. Focus on the high-level tasks, not the individual steps.
Use the following as a guide for both policies:
- Type of applicationsoftware
- Description of functions this software shouldallow
- Description of functions this software shouldprohibit
- Known vulnerabilities associated withsoftware
- Controls necessary to ensure compliance with desiredfunctionality
- Method to assess security controleffectiveness