Homework Responses Wk 8

The concept of cloud computing can assist security managers in the future by shifting some of the risk associated with compliance regulations. Ultimately this may allow Information Technology (IT) departments within the company to focus their time on other possible threats and vulnerabilities, instead of rudimentary task like spam filtering. Furthermore, the use of cloud computing can potentially free up funding to be utilized for security programs, “without a doubt, cloud computing offers an opportunity for the IT departments to transfer security risks away from their budgets and to the budget of a vendor” (Fay, 2010, p. 319).  

Concentric layering may be applied to future design and application of access control and computers by using countermeasures to deter, deny, and detect the unauthorized access to spaces or systems. John Fay Contemporary Security Management” touches on ways of keeping a company laptop safe. The laptop can be maintained in a secure location that requires a mechanical key to enter the space. Carefully placing closed circuit televisions (CCTV) at the entry point for the space and utilizing biometrics such as a retina scanner and palm print scanner intensifies the security. The actual computer containing sensitive company data will be kept inside of a locked container that requires a combination lock code to remove the device. The device shall require a strong password consisting of alpha numeric and special characters that expires routinely, complete with the ability to identify each user by verified certificates embedded on their common access card. System administration access should be controlled by the IT’s preventing tampering to installed programs. Lastly all company file folders will require two factor authentications.

 

 

References:

Fay, J. (2010). Contemporary security management. Elsevier Science & Technology.