1. Understand mechanisms to control organisational IT security
Unit 48 I.T. Security Management
HND in Computing and Systems Development
Understand mechanisms to control organisational IT security

2. Understand mechanisms to control organisational IT security
Risk assessment √
Data protection
Physical security

3. Computer Misuse Act 1990 Unauthorised access (section 1)
intent to commit or facilitate commission of further offences (section 2)
Unauthorised access with intent (section 2)
intent to impair computer operation (section 3)
Unauthorised modification (section 3)
Making, supplying or obtaining articles for use in offence under section 1 or 3
Task: Look at the examples given:
Real examples:
Discuss:
Why is this act significant to organisations?

4. site or system access criteria for personnel
What principles would you apply?
Draft a policy statement for MWS
What systems will they have?
Who will have access to the different systems?
When will they have access to them?
How will access rights be managed during day-to-day operations?
e.g. when someone joins the company what access rights will they be granted?
How will access rights be changed (granted or revoked)?
You may reference good practice from other users but must quote them!
OECD(Organization for Economic Co-operation and Development): Guidelines for the Security of Information Systems

5. anti-virus software
What recommendations would you make in terms of anti- virus software for MWS?
How would you manage it?
What are the shortcomings of your recommendations?
What are the advantages?

6. firewalls
What recommendations would you make for managing the firewall?
How should it be configured?

7. basic encryption techniques
What does encryption mean?
Prepare a presentation to explain a basic encryption technique? ((not Caesar Cipher)
Explain:
how to encrypt,
how to decrypt
and comment on the strength of the encryption.