1. Level 2 Diploma Unit 11 IT Security
Security Plan
Level 2 Diploma
Unit 11 IT Security

2. Assignment criteria
P4 Create a security plan for a small office or home network
P5 Implement a security plan
P6 Test a security plan
M3 Evaluate implemented security methods
D2 Recommend and justify security improvements

3. Creation Create a security plan for a small office or home network
What do we need in a security plan?
Assessment of current position
Risks
Priorities
Action items
Resources

4. Assessment
What is being assessed?
Data and devices
What is included?

5. Assessment Network and systems Current security Desktops Laptops
Printers
Servers
Routers
Internet connections
Current security
What items should be listed here?

6. Security items Spam filters Firewalls Updates Passwords
Anti virus
Spam filters
Firewalls
Updates
Passwords
Physical security
Wireless security
Web blocking
Backups

7. Risks What risks do we need to consider? We need a risk assessment.
Nature of risk
Likelihood
1 = unlikely
5 = almost certain
Consequence
1 = minimal
5 = catastrophic
Overall risk
L x C

8. Start your security plan
The system you are evaluating is the current computing department system
Your objective is to
review the current arrangements
assess the security risks
evaluate whether security is effective
make recommendations for improvements

9. Assessing the current system
You can investigate yourself
A lot of the security is similar in T208 and the computing department rooms
You can ask questions
You should also establish what data is being protected and whether there are levels of access

10. Risks
Use the slides from the previous lessons to list the specific risks to this computing system