Miznah A. AlMansour ID#200900258 COLLEGE OF BUSINESS ADMINISTRATION MISY 3321: Introduction to Information Assurance Section 201 Miznah A. AlMansour ID#200900258

Outline Zamil Industrial Overview Operations and Information Zamil Industrial Information Assurance Policy Zamil Industrial’s Experience in Lost/Misuse of Information Conclusion and Recommendation

Zamil Industrial Overview Zamil Industrial Investment Company was founded in 1998 and it headquartered in Dammam, Saudi Arabia Zamil Industrial provides products, engineering systems and services for the construction sector It sells pre-engineered steel buildings (PEB), air conditioning systems, district cooling and utility services, air-cooled heat exchangers, telecom towers, and much more

Zamil Industrial Overview (continued) Zamil Industrial has grown from a locally oriented industry into a global leader in expanding fields, where it sells its products in more than 90 countries Zamil Industrial main facilities are located in Saudi Arabia, along with additional factories located in Egypt, India, United Arab of Emirates, Vietnam and Italy

Operations and Information Zamil Industrial consists of five sectors; Steel, HVAC(heating, ventilation, and air conditioning), Glass, Insulation, and Concrete As many other companies, Zamil Industrial sensitive information is their most important asset, and protecting that data from theft or damage is just as important as protecting any other physical asset There are various types of information which Zamil Industrial keep, where their information-based assets are: financial data HR data supply chain data manufacturing data logistics data procurement data orders data projects data engineering data customer data maintenance data productivity data

Zamil Industrial Information Assurance Policy In Zamil Industrial, information assurance is a practice of assuring the use and security of the intangible assets. Information assurance polices in Zamil Industrial include but is not limited to: Information Security Management Acceptable Use of ZI IT infrastructure Policy Information Classification & Handling Policy Document, Data, & Record Control Risk Management Asset Management Access Control Policy Internal Audits Data Security & Guidelines Password Security & Guidelines Internet Service Policy

Zamil Industrial Information Assurance Policy (continued) All members of the organization must coordinate with the following requirements: Information collected for a specific purpose should not be shared with any outsider of the company without notification and consent Employees should use strong passwords to access the system to secure personal computers Employees should log out from the system when they are finished working Employees should not download e-mail attachments from unknown senders

Zamil Industrial Information Assurance Policy (continued) Employees are not allowed to download or install any computer program or software without prior approval from the IT department Employees should not access confidential information unless they have a legitimate need to know that information Employees may not post confidential information on publicly accessible computer of website Employees must immediately report potential information security breaches, or evidence of potential illegal activity to the IT department

Zamil Industrial’s Experience in Lost/Misuse of Information The Information Technology Auditor in Zamil Industrial, Mr. Husain, he confirmed that there was no lost or any misuse of information that the company has ever experienced. (Husain, 2012) That indicates and proves the high and strong security and assurance policies that Zamil Industrial practice regarding information

Conclusion and Recommendation Organizations must implement one or more formal IT best-practice control and process models Companies must ensure compliance with the standards, and always translate those standards into security guidelines, and most importantly is to incessantly evaluate current security state and frequently update policies

Conclusion and Recommendation (continued) And here are simple tips for companies to protect data and maintain strong information assurance: Conducts a security audit Information assurance awareness Strong passwords Data encryption Back up

References   Husain, M. (2012, September 20). Zamil Industrial Information Assurance Policies. (M. AlMansour, Interviewer) Zamil Industrial. (2012). Zamil Industrial Overview. Retrieved 2012, from Zamil Industrial: http://www.zamilindustrial.com/