Organisational Systems Security Assignment 2 tips (available on Wiki also)

Task 1 – Disaster Recovery (P5) Pick a disaster,i.e fire flood (not extreme as in earthquake or tsunami) List discovery plan in steps on PowerPoint slides as to how to recover (add additional info in notes as required) Think about the systems… initial plan.. Assessment of damage etc, middle road and then long term… Security Policies (session 13 for a guide)

Task 2 – Link legislation to tools and policies (P6/P7) Start by looking at legislation (law) handout (session 14) Match it with the security policy, that helps to ensure legislation is met (session 11 employment contracts and codes of conduct and session 13 for security policies) See sample slide for example layout

Eg. Computer Misuse Act Explain what this act covers in your own words. Then explain which security policy/contract/tools will cover this in an organisation (P6) – maybe use a table with 2 columns Use additional notes to explain how Contract of Employment, Codes of Conduct should include rules or guidelines See notes…. (P7)

Task 2 Full Example Legislation Computer Missus Act covers……… and ……… …… Security Policy Updating Security Procedures & Scheduling Security Audits Security audits – physical & networked systems – at regular intervals

Task 3 – Systems accessed without damaging data Read PowerPoint again in session 2 – Network Analysis Software Choose 2 different threats whereby information can be accessed without damage – i.e Scanners This is a MERITt question so a certain amount of research and understanding is required.

Task 4 – (D2) – Assess acceptable behaviour Suggested layout – REPORT Assess behaviour Research professional bodies and discuss what they consider to be acceptable behaviour. (session 13 – Security Policies lists professional bodies) Evaluate the usefulness – give your opinion of what works – DISTINCTION question requires that you understand, research and compare in order to give your opinion