1. Miznah A. AlMansour ID#200900258 COLLEGE OF BUSINESS ADMINISTRATION
MISY 3321: Introduction to Information Assurance
Section 201
Miznah A. AlMansour
ID#

2. Outline Zamil Industrial Overview Operations and Information
Zamil Industrial Information Assurance Policy
Zamil Industrial’s Experience in Lost/Misuse of Information
Conclusion and Recommendation

3. Zamil Industrial Overview
Zamil Industrial Investment Company was founded in 1998 and it headquartered in Dammam, Saudi Arabia
Zamil Industrial provides products, engineering systems and services for the construction sector
It sells pre-engineered steel buildings (PEB), air conditioning systems, district cooling and utility services, air-cooled heat exchangers, telecom towers, and much more

4. Zamil Industrial Overview (continued)
Zamil Industrial has grown from a locally oriented industry into a global leader in expanding fields, where it sells its products in more than 90 countries
Zamil Industrial main facilities are located in Saudi Arabia, along with additional factories located in Egypt, India, United Arab of Emirates, Vietnam and Italy

5. Operations and Information
Zamil Industrial consists of five sectors; Steel, HVAC(heating, ventilation, and air conditioning), Glass, Insulation, and Concrete
As many other companies, Zamil Industrial sensitive information is their most important asset, and protecting that data from theft or damage is just as important as protecting any other physical asset
There are various types of information which Zamil Industrial keep, where their information-based assets are:
financial data HR data
supply chain data manufacturing data
logistics data procurement data
orders data projects data
engineering data customer data
maintenance data productivity data

6. Zamil Industrial Information Assurance Policy
In Zamil Industrial, information assurance is a practice of assuring the use and security of the intangible assets. Information assurance polices in Zamil Industrial include but is not limited to:
Information Security Management
Acceptable Use of ZI IT infrastructure Policy
Information Classification & Handling Policy
Document, Data, & Record Control
Risk Management
Asset Management
Access Control Policy
Internal Audits
Data Security & Guidelines
Password Security & Guidelines
Internet Service Policy

7. Zamil Industrial Information Assurance Policy (continued)
All members of the organization must coordinate with the following requirements:
Information collected for a specific purpose should not be shared with any outsider of the company without notification and consent
Employees should use strong passwords to access the system to secure personal computers
Employees should log out from the system when they are finished working
Employees should not download attachments from unknown senders

8. Zamil Industrial Information Assurance Policy (continued)
Employees are not allowed to download or install any computer program or software without prior approval from the IT department
Employees should not access confidential information unless they have a legitimate need to know that information
Employees may not post confidential information on publicly accessible computer of website
Employees must immediately report potential information security breaches, or evidence of potential illegal activity to the IT department

9. Zamil Industrial’s Experience in Lost/Misuse of Information
The Information Technology Auditor in Zamil Industrial, Mr. Husain, he confirmed that there was no lost or any misuse of information that the company has ever experienced. (Husain, 2012)
That indicates and proves the high and strong security and assurance policies that Zamil Industrial practice regarding information

10. Conclusion and Recommendation
Organizations must implement one or more formal IT best-practice control and process models
Companies must ensure compliance with the standards, and always translate those standards into security guidelines, and most importantly is to incessantly evaluate current security state and frequently update policies

11. Conclusion and Recommendation (continued)
And here are simple tips for companies to protect data and maintain strong information assurance:
Conducts a security audit
Information assurance awareness
Strong passwords
Data encryption
Back up

12. References
Husain, M. (2012, September 20). Zamil Industrial Information Assurance Policies. (M. AlMansour, Interviewer)
Zamil Industrial. (2012). Zamil Industrial Overview. Retrieved 2012, from Zamil Industrial: