Phyllis Young

Project Deliverable 2: Business Requirements

Tu Nguyen

CIS- 498

David Belva

Introduction

In order to ensure safety of data, there should be a deployment of an active directory. An active directory is useful in restricting access to given files. Windows Active Directory is fit with a notification protocol that will fire a trigger should there be files could be accessed. The network should allow communication and collaboration through the staff. The employees should check their personal data such as banking information and other sensitive info without fear of losing their data. In order to curb such problems, the company, before deploying the network should have various mechanisms of ensuring safe file transfer, accommodate the ever-increasing online threat and allow safe and secure file transfer.

The main office of the company will take responsibility for the implementation of security and it is responsible for ensuring that the staff implements such security features. Individual site managers will be responsible for enforcing security for the subordinates. The offices, server rooms and the phone rooms should be given priority during the security design, there should be paper clearance and only few people allowed to the sensitive areas of the company (Kobus, 2009, p. 6). Another item to be included in the security list is workplace protection. The confidential data involving the team and the company such as sales data should remain as confidential as possible. All unused ports and should be disconnected from the server to ensure there is no unauthorized access from intruders.

The network equipment such as server, routers should be placed in secure areas. Apart from the digital security, there should be barriers to entries such as several combinations of locked doors. Each door should have different person opening and only fully authorized individuals should access the devices. Physical security such as laptops and equipment should be accessed via fingerprints, username. VPN software should also be included to ensure secure connections in the Internet. Unique and complex user passwords should be placed at strategic locations. Various website users can be allowed a particular pattern of password while the administrator password should be well defined. The company passwords should have minimum of two numbers, two lower case letters and an inclusion of special characters.

Database servers should have as pitiful openness and detectable quality to the Internet as could sensibly be normal. Right when, for example, an Internet-open web server is used as a front end for a database application, the database should not be on the Web server have itself. Similarly, the database host or framework firewall should deny regardless of movement from specific, static IP addresses and ports of usage and interface servers.

The company can pick which model to stay with, between the zone model or single space show up. The affiliation will have aces to consider specific portions which may affect the choices on which display is all things considered fitting.

• Cost - A solitary space display requires insignificant choice of the Working Index a range controllers, imagining the others to be close. This model needs a little two Active Index site area controllers that attract humblest entire emphasis to help the Dynamic Index affiliations. In the event that find a substitute space show up, littlest get-together of machines for the framework may change developing particularly.

• Intricacy - It truly is certain that the single-zone is the verifiable complex model to make and control. The multifaceted nature increments with the pushed models.

• Guidance - Which has a perplexing appearing over cerebrum, alliance stack is extended. The cost can be lessened by passing on bound together relationship at the server and records.

• Data partition - A general report in the Active Directory is a specific sort of range controller that wires a record of most inconveniences that are open inside then zones. Using the specific site models, the information can be limited inside past what many would consider possible. That is, the space names may be scrappy.

• Known security - If both of the site models is associated, the security contemplations can be associated since these frameworks for records and passwords are controlled at the spaces level. The shifting space models are secure as would be normal since they are totally pulled back as the single-grow exhibit has likelihood for interviewing of the information. (TechNet. Microsoft.com)

House Windows Integrated One Sign-On

It awards interfacing with different applications inside the system that utilization an affirmation gadget, which is regular for the colossal reason, that structure. This association demands and checks the capacities in the wake of stamping into the structure, and uses that insistence to search for the exercises to be performed relying on an individual security under course. (MSDN. Microsoft company.com)

Business requirements

Access Control

Consider using automated gadgets, store up advantages and methodologies should be used to maintain judgment abilities security prudent steps, for instance, impeding invalid customer session get to and renaming worked in manager accounts (Kodeswaran & Viegas, 2010). Consider removing the area administrative social events from the database parts and supplanting it with a custom adjacent get-together with simply real database officials. This may not shield adjacent administrators from surrendering themselves any get to they wish, however in any occasion these exercises would be auditable.

Encryption and integration

Database archives with bound information set away on PDAs (e.g. convenient PCs, go down tapes) or at danger workstations (e.g. out in the open regions) must be secured through encryption and strong passwords - or proportionate approval. Secure capabilities (and similarly exceedingly fragile restricted information) through encryption. Consider using SSL validations. When transmitting data or emulating databases over an un-place stock in framework, scramble data (e.g. SSL, demonstrate point VPN tunnels).

A group policy is a security measure used in a group of users to ensure that they access the same resources without violating their clearance level. The group policy is therefore used to define configurations for the different group of users. Consider removing the area administrative social events from the database parts and supplanting it with a custom adjacent get-together with simply real database officials. This may not shield adjacent administrators from surrendering themselves any get to they wish, however in any occasion these exercises would be auditable. To have a formal guide to the group policy, there is a need for a clear understanding of business needs, security requirements, network and IT requirements. After thorough defining the set objectives to meet the group policy, the group policy guidelines can be used in designing and deploying Policy Infrastructure. The most important and significant consideration in implementing a Group Policy for users such as 100 in this scenario the following can be useful

· Ensure minimal management overhead and complexity

· To ensure there is minimal impact on the end users

· Ensure the users understand the group policy

· To ensure balance of security in all computers

The following are significant needs to be put into consideration while designing a group policy;

Active Directory: The officers to make sure that Active Directory for all domain supports the Policy.

Networking: The network should meet the requirements for the change of the Group Policy. Most of the Group Policies are applied at the domain level; there is the need for the DNS running in the forest which can process the Group Policy. Security: A list of all security groups obtained. This means that the officers should work closely with the security administrators while delegating responsibility and creating designs that would be used in security filtering. IT requirements: in the IT requirements, a requirement that a list of regulatory standards put in place for the domain. The conditions will be useful in delegating plans that will fee that the Group Policy is passed down the hierarchy. The question to the company should be, does it validate the need for multiple domains? Does the company require certain users to be on a different domain? If so then additional forests will be required.

The central of the company will take responsibility for the implementation of security and it is responsible for ensuring that the staff implements such security features. Individual site managers will be responsible for enforcing security for the subordinates. The offices, server rooms and the phone rooms should be given priority during the security design, there should be paper clearance and only few people allowed to the sensitive areas of the company (Kobus, 2009, p. 6). Another item to be included in the security list is workplace protection. The confidential data involving the team and the company such as sales data should remain as confidential as possible. All unused ports and should be disconnected from the server to ensure there is no unauthorized access from intruders.

Administrative requirements

To use Group Policy actually, the organization must use Active Directory, and the Desktop Server must run on Windows Server 2008 or later. Using this setting, only members of the Admin group can create links to the GPO. This task can be delegated to other users. Another consideration is using GPMC which provides a unified management to all Group Policies. The GPMC is useful when managing the GPO in the Windows Management Instrumentation shortened as WMI and other GP related securities in the network. Generally, in the Active Directory Environment, a group policy is assigned to link GPO to url. Most companies assign GPO at the Uri level so the officers implementing the Group Policies should use the Client-based management strategy. Some settings such as password policies should be applied at the domain level. Care must be taken not to create too many policies at the site level; this applies to the password policies as well. To determine the number of domains is another step in the AD DS

The number of domains coincide with the number of Forests, the design will at least one domain. Multiple forests require one domain at a minimum per forest.

Therefore, a well-designed organization will give the officers easy time while implementing the group policy. A good team structure means that duplicate GPO so that the GPOs can be applied to other sections of the company. The following issues must be addressed during this process;

Delegation Administrative Authority: This can be created within the domain, and then administrative control is delegated to different users in a particular User Group.

Applying Group Policy: to successfully implement the policy, all objects to be managed need to be put together to suit the design of User Group Policy.

Risks Analysis

From the figure above, key threats includes human risks, operational threats, procedural risks, financial threats and political threats. These dangers are spread all through the undertaking life-cycle and there is requirement for venture director to consistently evaluate potential new dangers liable to influence venture fulfillment. There are five procedures to use to counter their belongings. These incorporate dangers evasion, hazard control, dangers suspicion and danger exchange. Their application is incredibly affected by individual discernment and nature. For instance, risk-aversive and risk-taker managers are likely to prefer different strategies (Biofore, 2010).

Number of Forests

Another risk that comes with Active directory is the number of forests. The forests though cheaper to manage, allocation of multiple forests is a big challenge. If the company is to be sold in the near future, the forests will be designed for this purpose and as is the case, it is difficult to know if the company will undergo acquisition or take over and this makes the forests difficult to design. Multiple forests allow integration with database, administration, and are subject to trust and legal regulations. When multiple forest is implemented, the cross platform sharing of information necessitate trust within the company.

Reference

Chen, D. Kifer, K. LeFevre, and A. Machanavajjhala (2010). Privacy-preserving data publishing. Foundations and Trends in Databases, 2(1-2).

I. Dinur and K. Nissim (2016). Revealing information while preserving privacy. In PODS, 2003.

G. Kabra, R. Ramamurthy, and S. Sudarshan (2016). Redundancy and information leakage in fine-grained access control. In SIGMOD.

P. B. Kodeswaran and E. Viegas (2010). Applying differential privacy to search queries in a policy based interactive framework. In CIKM-PAVLAD,