Reference no: EM133244785

Case: Shovels and Shingles is a small construction company consisting of 1 multi-purpose server and 25 networked workstations and laptops. All employees have Internet access and use email. The construction manager and workers use tablet PCs in the field. The following are types of security controls: Administrative controls: Policies approved by management and passed down to staff, such as policies on password length Logical/technical controls: Control access to a computer system or network, such as a usemame and password combination Hardware controls: Equipment that checks and validates IDs, such as a smart card for or security token for multifactor authentication Software controls: Controls embedded in operating system and application software, such as NFS permissions Physical controls: Control entry into buildings, parking lots, and protected areas, such as a lock on an office door.

Answer the following question(s):

Question 1. What are two types of data and connections that Shovels and Shingles should protect?

Question 2. Which types of security controls would protect that data?

Fully address the questions in this discussion; provide valid rationale for your choices, where applicable;