Learning Objectives and Outcomes
Analyze appropriate security controls for a given scenario.
Assignment Requirements
Shovels and Shingles is a small construction company consisting of 1 multi-purpose server and 25 networked workstations and laptops. All employees have Internet access and use email. The construction manager and workers use tablet PCs in the field.
The following are types of security controls:
Administrative controls: Policies approved by management and passed down to staff, such as policies on password length
Logical/technical controls: Control access to a computer system or network, such as a username and password combination
Hardware controls: Equipment that checks and validates IDs, such as a smart card for or security token for multifactor authentication
Software controls: Controls embedded in operating system and application software, such as NTFS permissions
Physical controls: Control entry into buildings, parking lots, and protected areas, such as a lock on an office door
Answer the following questions
What are two types of data and connections that Shovels and Shingles should protect?
Which types of security controls would protect that data?
Fully address the questions in this discussion; provide valid rationale for your choices, where applicable; and respond to at least two other students’ views.
Required Resources
Course textbook- David Kim and Michael G. Solomon, Fundamentals of Information Systems
Security 4th edition, Jones & Bartlett, 2023
Internet access
Submission Requirements
Your submission must have a title page (See Sticky Section)
Format: PDF
Font: Arial, size 12, double-space
Length: 1 page
