Enterprise information security policy--多伦多大学Assignment代写范文

多伦多大学信息管理Assignment代写范文:“Enterprise information security policy”，这篇论文主要描述的是互联网技术的发展，企业和个人对于隐私信息的保护意识越来越强，许多大型和中型的企业已经开始认识到信息安全的重要，但是却没有一个比较全面系统化的方案，因此制定一套含计算机程序、管理员职责略以及安全验证技术的安全策略对于中型企业而言迫在眉睫，它能够较好的保护企业的信息安全。

Write a Security Policy for an IT Organization that would be appropriate for that of a mid-sized company that is on a very tight budget. Include an overview and mission statement, policies for computers and computer programs. Also include roles and responsibilities and verification and validation techniques to be employed.

概述和任务陈述Overview and mission statement

An IT organization in middle size may have already realized the importance of information security, however it doesn’t have systematical concept of security and determinations. So some standard and polices will be set up informally and monitoring and punishment are also lacked. Especially that employees can dismantling the host casually, use the administrator’s account of the local host, download and install different types of software and so on. All of these will bring great risk for the security management. Therefore, the goal for this essay is to write a security policy for a middle-sized IT organization with tight budget so that it can better manage its company in security aspect.

计算机和计算机程序的编排Policies for computers and computer programs

We have to recognize the difference between the intranet security and network border security. The security threatening mainly comes from the company itself. The vicious hacker attacks tend to control local area network inside a server first, based on which, then it will attack other servers on the internet. Hence we should set up the protection on the border and so do the intranet.

If there are thousands computers on a network, it is impossible to expect that every hosts are in the lock status and patch state. So we have to have a priority strategy for the network security. First the benefit analysis evaluation has to be done for the host, then each of the intranet web server has to be classified, repaired and strengthened.

角色与职责Roles and responsibilities

Nowadays, the employees is making more and more serious threaten to the company. Some reports suggest that employees threaten has increases from 80% to 86% among all of the risks. Hence the manager is playing a great role in company’s information security and IT check should be carried out in several aspects so reduce the cheat coming from the employees.

The manager should check those accounts that can manage the special accounts, such as the domain administrator account, application administrator account, database administrator account, etc. To ensure the existing of security policy, they have to know how the access is processed, validated and certificated. Besides, all of the policies have to be reviewed on a regular basis.

验证技术Verification and validation techniques

There has to be the allocation standard for the accounts and passwords. All of the administrator accounts should be updated strategically. In a specific device, there should be no default password. The password cannot be the same as the security account and the allotted time for the password is also very important. Sometimes forbidden the use of some obvious temporary account is a good idea.

Many of the companies have set up the security known project. Since every employee and consumer can become threaten. A security known project has to cover all of the possible security problems and ensure that it can be executed. Now there are lots of the schemes that is used to ensure the users have read and agreed with the related regulation and policy. One of the tools is that users are asked to sign on a alert massage and confirm and select the agree check box.

51due留学教育原创版权郑重声明：原创留学生作业代写范文源自编辑创作，未经官方许可，网站谢绝转载。对于侵权行为，未经同意的情况下，51Due有权追究法律责任。

51due为留学生提供最好的服务，亲们可以进入主页了解和获取更多assignment代写范文 提供美国作业代写以及多伦多论文代写服务，详情可以咨询我们的客服QQ:800020041哟。-xz