Describe the role of information systems security (ISS) compliance and its relationship to U.S. compliance laws
Imagine you are an Information Security consultant for a small college registrar’s office consisting of the registrar and two assistant registrars, two student workers, and one receptionist. The office is physically located near several other office spaces. The assistant registrars utilize mobile devices over a wireless network to access student records, with the electronic student records being stored on a server located in the building. Additionally, each registrar’s office has a desktop computer that utilizes a wired network to access the server and electronic student records. The receptionist station has a desktop computer that is used to schedule appointments, but cannot access student records. In 1974, Congress enacted the Family Educational Rights and Privacy Act (FERPA) to help protect the integrity of student records. The college has hired you to ensure technical safeguards are appropriately designed to preserve the integrity of the student records maintained in the registrar’s office.
Write a three to five page paper in which you:
Analyze proper physical access control safeguards and provide sound recommendations to be employed in the registrar’s office.
Recommend the proper audit controls to be employed in the registrar’s office.
Suggest three logical access control methods to restrict unauthorized entities from accessing sensitive information, and explain why you suggested each method.
Analyze the means in which data moves within the organization and identify techniques that may be used to provide transmission security safeguards.
Use at least three quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.
Describe the role of information systems security (ISS) compliance and its relationship to U.S. compliance laws.
Use technology and information resources to research issues in security strategy and policy formation.
Write clearly and concisely about topics related to information technology audit and control using proper writing mechanics and technical style conventions.
……………….Answer preview………………………An organization’s data and information are significant aspects of the organization. It is essential to keep them safeguarded. This is where information security comes in. Information security helps keep out unauthorized personnel who may be out to access, steal or modify the data to their advantage. Any organization ought to look…………………………
