Analysis of Information Technology Protection

Backing up information can help safe the companies if any data is lost, and the companies would be able to recover the data that was lost. Security Security consideration features for information systems will vary for the type of information held, but the basic features will hold the information securely. The major security features for the company systems will include a login using a user ID and password, user authorization, and priority access. The security features would also use the four access control models of Identification, Authentication, Authorization, and Accountability. The access control would use the mandatory access control (MAC), which is a structured and coordinated within a data scheme that rates the information collection and the users (Whiteman & Mattord, "Ch 6: Security Management Models," 2010).

By performing a periodic assessment, management assures that internal control activities have not become outdated or lost due to costs or other factors. Internal Control Activities and Best Practices Internal control activities are the policies and procedures as well as the daily activities that occur within an internal control system. A good internal control system should include the control activities listed below. 1. Preventive: Preventive control activities aim to deter the instance of errors or fraud.

Internal controls are processes designed by companies to ensure the security, accuracy, and completeness of its financial and accounting data. These processes are put in place by the company to ensure adherence to its policies and plans while also protecting its valuable data from unauthorized access. A majority of companies, whether or not they know it, have some form internal control system in place. One area in particular that will most likely entail having internal controls is a company’s information network as the security of the network is the primary objective. Without these controls in place, a company allows itself to become vulnerable to network intrusion and possible data manipulation.

The goal of these two is to protect the company from possible data loss and to ensure business continuity despite of broken down IT equipment and destroyed business resources. Through backup, relevant files are copied and through disaster recovery these files are made accessible to ensure continued business operations. Although these two components are separate, one needs the other in order to completely fulfil the goal of protecting a company from data loss....

Thus, every organisation should act in order to protect their information communication technology and valuable information. This means that company should has chief information security officer (CISO) and special information security department, which will organise all those actions. Moreover, to be successful, the information security department must develop productive relationships with other departments and chief level officers within the company. However, cyber security also must be concern of other chief level officers. Organisation have different types and number of chief level officers depending their business nature.

Thus, protecting our information has become a number one priority, as information security helps protect lives and businesses. In today’s day and age it is vital for various companies and institutions throughout the world, to practise information security. Various collections of information need to be securitized in order to help protect the privacy of both clients and customers. Information security refers to the act of protecting information and information systems from unauthorized access, use, disclosure, disruption modification or destruction (Laura Schneider, 2012). Data held on various IT systems could be of value and critical to the business, thus it is essential to maintain that the information security is most up-to-date.

3.6 Incident Response Incident response is the method for dealing with the security of a computer system when there is an attack. Incident response activities include incident verification, analyzing and containing the attack, collecting and preserving data, fixing the problem, and restoring services. Hence it is very essential to revise the organization's incident response plan and ensure that the differences between the computing environment of the organization and the cloud are addressed. This is a prerequisite for transitioning of applications and data but it is overlooked most of the time. To ensure security and privacy in cloud computing, it is important for the service provider and the subscriber to collaborate and formulate a well-defined incident response plan.

Firewall is being choosing by the organization because it has the high security that can save all the data and files. If the firewall is not being use by the organization, it can expose the system that created to the intruders like hackers and spies. The demand of the firewall is very high for... ... middle of paper ... ...that permits traffic and one that exists to block traffic. Whether a company wishes to place more emphasis on permitting or blocking traffic is up to the individuals who set the security policies for that company. A company should not leave this to the discretion of the service or product that will supply the security because only the company knows what kind of protection it needs.

Nowadays, the uses of computer systems is needed and important in an organization or company that runs and conduct the business in any fields including on customer service, marketing and sales activities, customer relationship management and producing financial statement and etc. As we can see, the uses of computer systems are increasingly prevalent and widely use in organization all around the world to protect and organize the organization properly, safe on keeping the data of their system and run smoothly their organization. While each company or organization has a policies and procedures and to design to prevent the problem that will occur or effect of failure, the computer system may be vulnerable to disruptions or breaches as the result of natural disaster, manmade disaster, criminal activity, pandemics or other event beyond our control. The computer system failure that fails for any reason could disrupt the operation of the organization, result in loss of customer and will also impact the profitability of the organization. The problem that occurs to some companies has given them a problem that they don’t believe will happen to their system.

For the company this will be a risk that they wouldn’t take as it may bring them a legal case if information was of an extreme content which was distributed inside the company's emails and internet. This would tarnish their reputation as a good business to work with. This is why policies are put in place to protect companies such as CaWRO from material in emails and the Internet. These policies will be put in place protect the company as a whole and even if people would use the Internet and email to distribute inappropriate things the company will not be held responsible and in some certain cases the employee who was distributing the information will be fired or in some extreme cases prosecuted for criminal acts such as distributing inappropriate content.