Individual Assignment Week 4.
Project Data Security Plan.
Business Information System (BIS/320)
March 20, 2020
Prepare for your exams
Study with the several resources on Docsity
Earn points to download
Earn points by helping other students or get them with a premium plan
Guidelines and tips
Prepare for your exams
Study with the several resources on Docsity
Earn points to download
Earn points by helping other students or get them with a premium plan
The threats to the security of personal information in a project and recommends security and threat prevention technologies to protect it. It highlights the importance of internal security threats and suggests the use of RFID technology and logging for monitoring and auditing employee activities. relevant for students studying Business Information Systems and data security.
Typology: Exams
2021/2022
1 / 4
This page cannot be seen from the preview
Don't miss anything!
Related documents
Partial preview of the text
Download Project Data Security Plan and more Exams Business Ethics in PDF only on Docsity!
Individual Assignment Week 4.
Project Data Security Plan.
Business Information System (BIS/320)
March 20, 2020
What type of internal and external threats are there to the
security of the project?
In this day in age, unfortunately, there will always be threats to security internally and externally, there is a very good chance that the security of the personal information being gathered could be compromised by either an inside or outside source. Insider threats are very real and unfortunately, not as uncommon as you would expect. The internal threat to the security of the project is actually a much greater danger than any of the potential external threats.
What type of security and threat prevention technology would you
recommend and how would you implement it?
There are several types of security and threat prevention technologies that could be beneficial for the protection of the Veterans personal information. Some of the technologies that could be utilized are as follows:
- RFID, a non-contact, automatic identification technology which uses radio signals to identify, track, sort and detect a variety of objects including people, vehicles, goods, and assets, without the need for direct contact like what is found in magnetic strip technology or line of sight contact that is in bar code technology. This is helpful because most ID cards and Common Access (CAC) cards are being used by both the Veterans and the VA employees, they have a biometric strip or chip in them that contain all of their personal information for RFID readers.
- Logging, along with periodic monitoring, and auditing of employees on and offline activities.
SECURITY THREATS ON CLOUD COMPUTING VULNERABILITIES by Te-Shun Chou International Journal of Computer Science & Information Technology, ISSN 0975-4660, 06/2013, Volume 5, Issue 3, pp. 79 - 88 Enemies within: Redefining the insider threat in organizational security policy by Wall, David S Security Journal, ISSN 0955-1662, 04/2013, Volume 26, Issue 2, pp. 107 – 124 Prevention and Detection Methods for Enhancing Security in an RFID by Jing Huey Khor; Widad Ismail; Mohammad Ghulam Rahman System International Journal of Distributed Sensor Networks, ISSN 1550-1329, 01/2012, Volume 2012, pp. 1 - 8 http://www.networkworld.com/article/2280365/lan-wan/13-best-practices-for-preventing-and- detecting-insider-threats.html