Rawabi Holding Company Information Assurance A Trend To Excellence MISY 3321: Introduction to Information Assurance Section: 101 Name: Mohammad Khalifa Aldossary ID: 200800586 Major: Management Information System Supervised By: Dr. Mohammad Rafiq

Outline 1. Introduction and Brief History of the Organization 2. Type of Information Rawabi Deals With 3. Loss and Miss-Use of Information 4. Organization Information Assurance Policies 5. Security System Execution 6. Conclusion

1. Introduction and Brief History of the Organization In the present decades, human beings are racing in a large scale to cope up with the latest technologies invented Companies are involved in updating and enriching its environment with recent upsurge trends of technologies Rawabi holding company is one of the leading companies in Saudi Arabia, amid to Aramco and Sabic, which was found in 1980 There is a need of having an integrated system, because of having more than 20 buildings in geographical dispersed locations to work in 25 disciplines of products and services to cover Thousands of employees data to save

2. Type of Information Rawabi Deals With Rawabi deals with information about the following: The employees at first The society (CRM) Contractors and Project-sides Suppliers (SRM) Technological and Oil(extraction, refining, processing)-related information. When we say assure, we mean to make it confidential, secure against external attacks, accurate, integral, and available for internal usage.

3. Loss and Miss-Use of Information In year 2007, Mr. Mario Foster, Rawabi IT group manager, recognized that the company level in its operations and different processes was in top of the trend Nonetheless, the technology used was not too weak Also, there was a huge problem in the panel of having a weak domain that can be cracked easily by external attacks

3. Loss and Miss-Use of Information Therefore, Mr. Mario Foster in February 2007 started to plan and implement the project. His aim was to: 3.1. Unify the database servers and link them to the network 3.2. Install Cisco telecommunication system 3.3. Purchase a new domain for the company Once they’ve finished in 2009, the company information became too reliable and secure.

4. Organization Information Assurance Policies Network Access Policy User Account Policy Remote Access Policy Information Protection Policy See Figure (4-1) Computer Security Policy

5. Security System Execution In order to secure the company’s intranet, extranet, and the internal network from any filthy criminal attack, there is a need to have some sort of a security system to monitor the situation. Two important attackers to be aware of which are The Denial of Service (DoS) The Distributed Denial of Service (DDoS) In Rawabi, they configured a system called the Security Device Manager (SDM) It provides an integrated management of cisco such as firewalls (site integrity), Virtual Private Networks –VPNs- (data privacy), and encryption (privacy).

6. Conclusion When we look after today’s global market, we tend to feel that the environment we are in is always not secure. This for sure would give us a hint that we always need to save our assets. One of the most platinum assets is information Rawabi, one of the top companies in Saudi Arabia who serve in distinguish sectors, implemented different ideologies to assure information. From my opinion, I suggest for different organizations to do the same as Rawabi analyst did who made their work more efficient and reliable

THANK YOU FOR LISTENING Q’s & A’s

Return To the Slide