1. Rawabi Holding Company Information Assurance
A Trend To Excellence
MISY 3321: Introduction to Information Assurance
Section: 101
Name: Mohammad Khalifa Aldossary
ID:
Major: Management Information System
Supervised By: Dr. Mohammad Rafiq

2. Outline
1. Introduction and Brief History of the Organization 2. Type of Information Rawabi Deals With 3. Loss and Miss-Use of Information 4. Organization Information Assurance Policies 5. Security System Execution 6. Conclusion

3. 1. Introduction and Brief History of the Organization
In the present decades, human beings are racing in a large scale to cope up with the latest technologies invented
Companies are involved in updating and enriching its environment with recent upsurge trends of technologies
Rawabi holding company is one of the leading companies in Saudi Arabia, amid to Aramco and Sabic, which was found in 1980
There is a need of having an integrated system, because of having more than
20 buildings in geographical dispersed locations to work in
25 disciplines of products and services to cover
Thousands of employees data to save

4. 2. Type of Information Rawabi Deals With
Rawabi deals with information about the following:
The employees at first
The society (CRM)
Contractors and Project-sides
Suppliers (SRM)
Technological and Oil(extraction, refining, processing)-related information.
When we say assure, we mean to
make it confidential, secure against
external attacks, accurate, integral,
and available for internal usage.

5. 3. Loss and Miss-Use of Information
In year 2007, Mr. Mario Foster, Rawabi IT group manager, recognized that the company level in its operations and different processes was in top of the trend
Nonetheless, the technology used was not too weak
Also, there was a huge problem in the panel of having a weak domain that can be cracked easily by external attacks

6. 3. Loss and Miss-Use of Information
Therefore, Mr. Mario Foster in February 2007 started to plan and implement the project. His aim was to:
3.1. Unify the database servers and link them to the network
3.2. Install Cisco telecommunication system
3.3. Purchase a new domain for the company
Once they’ve finished in 2009, the company information became too reliable and secure.

7. 4. Organization Information Assurance Policies
Network Access Policy
User Account Policy
Remote Access Policy
Information Protection Policy
See Figure (4-1)
Computer Security Policy

8. 5. Security System Execution
In order to secure the company’s intranet, extranet, and the internal network from any filthy criminal attack, there is a need to have some sort of a security system to monitor the situation.
Two important attackers to be aware of which are
The Denial of Service (DoS)
The Distributed Denial of Service (DDoS)
In Rawabi, they configured a system called the Security Device Manager (SDM)
It provides an integrated management of cisco such as firewalls (site integrity), Virtual Private Networks –VPNs- (data privacy), and encryption (privacy).

9. 6. Conclusion
When we look after today’s global market, we tend to feel that the environment we are in is always not secure.
This for sure would give us a hint that we always need to save our assets. One of the most platinum assets is information
Rawabi, one of the top companies in Saudi Arabia who serve in distinguish sectors, implemented different ideologies to assure information.
From my opinion, I suggest for different organizations to do the same as Rawabi analyst did who made their work more efficient and reliable

10. THANK YOU FOR LISTENING
Q’s & A’s

11. Return To the Slide