You would have to put the trust of the library personnel and staff who would have access to the system. As a system administrator you would have to perform a daily security audit check of who accessed the computer system and at what times they accessed it. I would also purchase a Norton antivirus software and place all lock downs on the system so hackers could not access the data. As a system administrator or even the Lead Librarian you should always have concern of anyone accessing your networks and stealing data from the computer. And to feel more secure I would purchase a firewall so that the outside would have A hard time accessing the network.
Companies such as this are required not only legally, but ethically to protect the customers’ private information or be held accountable by law. It is also bad practice to allow this sensitive information to be disseminated and stolen by cyber criminals. Since this kind of data must be protected at all costs, certain regulations were put in place so that standards for information security could be monitored. One of these standards is that all personal information is to be encrypted when being sent over the internet and also on the servers. This will make it much harder for the hacker to access the information easily.
MGT2 Task 3 Part A. Addendum to Xemba Translations’ Telecommuter Expansion Project Risk Assessment Matrix Description of Risk | Impact | Likelihood of Occurrence(L,M,H) | Degree of Impact(L,M,H) | Initial Action to Take if Event Occurs | Team Member Responsible | Strategies for Prevention and Mitigation | | Customer data becomes public, or altered because of lax in security on telecommuters computers | “The FTC Act provides penalties monetary, as well as, criminal for violations of consumer data privacy,” (Jolly, 2013). Consumers may also elect to pursue civil action. | L | H | Deny further access to the company database from any external sources until measures are taken to assure this does not happen again. | Hugh, Malinda | Make sure there is a privacy policy in place and that employees are aware of it and the consequences of violations. Secure the Telecommuters computers before they are distributed.
Biii: Describe how to ensure security when reading or making entries into records. To maintain confidentiality you should read or write reports/files in a private area where you can’t be overlooked and let others know not to disturb you (unless emergency, then remember to lock away). Biv: Describe any special feature of different storage systems that help to ensure security. If your files are stored on computer or other electronic device you should ensure it is password protected and that any removable devices are locked away securely. Usernames and antivirus programs also you better protection.
Personal E-Mail Accounts Prohibit Corporate Tech employees and contractors from transmitting sensitive information using any personal e-mail accounts (e.g., Hotmail, Yahoo, MSN). Testing & Vulnerability Assessment Ensure that all Corporate Techs systems and networks containing sensitive or mission critical information undergo vulnerability scanning and/or penetration testing to identify security threats at least annually or when significant changes are made to the system or network. Cryptography Ensure that all information requiring protection from unauthorized disclosure is encrypted during transmission using current NIST encryption standards and Department-approved encryption products. Corporate Tech employees and contractors shall not transmit such information without using cryptographic protections. Malicious Code Protection Implement and enforce a malicious code protection program designed to minimize the risk of introducing malicious code (e.g., viruses, worms, Trojan horses) into all systems and networks.
We will use state-of-the-art software Med Ez is a software specially designed for rehabilitation centers we will also incorporate computers, and tablets. The system will consist of an internal network with appropriate servers and switches. The communication system will be a Cisco unified system which will manage calls and messages. All of our IT issues will first be troubleshoot by our staff, if the problem can not be fixed by, we would outsource to an IT consultant. This is due because all of our information can be considered private or classified and we don’t want to run the risk of having it open to anyone else.
Confidentiality is about respecting other people's rights to privacy and keeping safe the information that they have provided. The Data Protection Act 1998 related to the gathering , handling and storing of information, the Human Rights Act Article 8 relates to an individual’s right to privacy and the Freedom of Information Act 2000 covers access to information which doesn’t include personal details which is not included in the Data protection Act Confidentiality relates to all communication types we need to ensure all our written and electronic files are secure by keeping them on a password protected computer which is only accessed by named staff members and viewed by appropriate officials. Paper files that have individual personal details on are locked in a filing cabinet and accessed by management and key people. When working with service users and family members or even colleagues themselves they may give us information that is not intended to be shared around. Sometimes this information may be of a personal nature or simply not relevant to other people.
Unit 9 Assignment 1: List Phases of a Computer Attack In this assignment I am a hacker who needs to protect my organization from a computer attack. I will list general phases of a computer attack. We have an organization that we need to protect from outside attacks by foreign parties. I am an ethical hackers who needs to take preventative measures in order to adequately secure the network against these attacks. Many attackers follow a general set of steps in order to gain the permissions necessary to break into a system.
If patient’s records, information about patient’s or accident forms are located on computers then staff must maintain the security of this information by making sure computers are logged off properly and locked when not in use and change their individual passwords regularly. If patient’s information needs to be stored on a USB stick or hard drive then they must be encrypted to ensure security and safety. When staff are making entries in patient’s records or reading information about patient’s they must make sure this remains confidential. When writing information in records staff need to be aware of who is around them and who can see the information that is being written. Make sure patient’s information is written in the staff office so that people not involved in their care can not see what is being written.
Some policies should include the inability to process family/friends’ transactions and disabling cell phone and personal email use during work hours (except for emergencies). I would also enable supervisory programs that can track employee work history and set web portal controls through organizational databases. Video surveillance would be an important addition to the physical security plan in order to conduct investigations in the event of an actual incident. Hard drives and USB sticks should be banned unless they are considered company property and used appropriately. Since email monitoring tends to be controversial, it might be beneficial to look into software programs that can trace anything communicated through company technology that would be considered a threat instead of monitoring every