Information Security Policy

IT 244 Information Security Policy 1

Information Security Policy
Samuel Ighalo
University of Phoenix
IT 244
JAMES DUTCHER
8/1/10

IT 244 Information Security Policy 2

Executive Summary
The Physical Security domain includes traditional safeguards against intentional and unintentional threats. Physical security threats can come from be man-made attacks. Educating personnel about the importance of emergency response and accepting responsibility for their actions is critical. One type of physical security control involves the use of mechanisms such as fences and gates to control access to a facility. Another type of physical security control is photo identification badge to protect facilities. One rapidly growing area of technical security controls is biometrics. Biometrics uses human traits such as fingerprints to identify and authenticate an individual.

Access controls differentiate between identifying users of a system and authenticating them. This is done using discretionary means, which an information owner decides who obtains access rights. Passwords are the most common method that people use to authenticate their identities. Remote access control technology like RADIUS permit travelers and employees to access corporate networks without the need for expensive dial-up connections or additional hardware costs.

Network security policy describes the different network access equipment and the security control devices. The two types of network access controls are LAN and WAN. The reader will explore several types of security approaches used to protect the corporate networks intersect. These include the uses of routers, firewalls, and intrusion detection systems (IDSs)



IT 244 Information Security Policy 3

Information Security Policy
XYZ Energy is a nuclear power generating company with 50 plants located throughout the United States. XYZ Energy's network and computer systems are in two locations that serve as backup cold... [continues]

Read full essay