Premium Essay

Case Study 3: Security

In:

Submitted By Spiderman5590
Words 1983
Pages 8
Case Study 3: Security

1. Analyze the new system and determine the design issues with this new system.

With any type of fast-food restaurant grease and other types of oils are used in the process to create the food that is delivered to the customers. Since these oils are being used to create the food the employees need to touch the food and most times to either cook it or deliver the food to the customers. The unfortunate handling of this food causes the employees to get grease on their hands and fingers. This can be an issue with the design because after time the grease built up will cause the screen to become unresponsive or unreadable as well. Another design issue that the new system has is a two part security issue. First is a lack of security giving the ability for employees to login into the register interface for other employees that have forgotten their user id and passwords. This is huge concern for the management because each employee is responsible and accountable for their time on the register and money that goes into the register as well. If other employees are logging into the system for them, and the register comes out short at the end of the night, there is no body to hold accountable for the missing money. This huge security risk for management, all employees should be held accountable for their time on the register and not be logging into the system for other employees.
The other security concern that is a design issue with the new system are the security features that are built into the interface. First off if an employee logs into the system and then forgets to log out and the system locks, other employees cannot login into the system. Employees require a user id to login into the system and they keep on forgetting either their user id or password. Another design issue is that the interface’s buttons are very close together

Similar Documents

Free Essay

Sec 402 Wk 7 Case Study 2 Developing the Forensics

...SEC 402 WK 7 CASE STUDY 2 DEVELOPING THE FORENSICS To purchase this visit here: http://www.activitymode.com/product/sec-402-wk-7-case-study-2-developing-the-forensics/ Contact us at: SUPPORT@ACTIVITYMODE.COM SEC 402 WK 7 CASE STUDY 2 DEVELOPING THE FORENSICS SEC 402 WK 7 Case Study 2 - Developing the Forensics, Continuity, Incident Management, and Security Training Write a five to seven (5-7) page paper in which you: 1. Consider that Data Security and Policy Assurance methods are important to the overall success of IT and Corporate data security. a. Determine how defined roles of technology, people, and processes are necessary to ensure resource allocation for business continuity. b. Explain how computer security policies and data retention policies help maintain user expectations of levels of business continuity that could be achieved. c. Determine how acceptable use policies, remote access policies, and email policies could help minimize any anti-forensics efforts. Give an example with your response. 2. Suggest at least two (2) models that could be used to ensure business continuity and ensure the integrity of corporate forensic efforts. Describe how these could be implemented. 3. Explain the essentials of defining a digital forensics process and provide two (2) examples on how a forensic recovery and analysis plan could assist in improving the Recovery Time Objective (RTO) as described in the first article. 4. Provide a step-by-step process that could...

Words: 1406 - Pages: 6

Free Essay

Cis 333 Wk 3 Case Study 1 Mobile Devices

...CIS 333 WK 3 CASE STUDY 1 MOBILE DEVICES To purchase this visit here: http://www.activitymode.com/product/cis-333-wk-3-case-study-1-mobile-devices/ Contact us at: SUPPORT@ACTIVITYMODE.COM CIS 333 WK 3 CASE STUDY 1 MOBILE DEVICES CIS 333 WK 3 Case Study 1 - Mobile Devices You are an Information Security consultant for a small doctor’s office consisting of three doctors and two nurses. The office is physically located among several other professional office spaces. The doctors have decided they would like to replace the current method of using paper based medical records with automated medical records. The doctors would like to use mobile devices over a wireless network to move from one examining room to the next to document patient visits. Given the extremely sensitive information captured by the mobile devices and the wireless network, the doctors require you to provide a detailed plan identifying inherent risks associated with this network environment and establish mobile device and wireless security methods that will mitigate the risks. Research findings will be submitted with a minimum of three (3) scholarly level APA references. Write a two to three (2-3) page paper in which you: 1. Identify risks inherent in the use of wireless and mobile technologies. 2. Analyze the identified risks and develop factors to mitigate the risks. 3. Provide a sound recommendation to be employed in the doctor’s office. Activity mode aims to provide quality study notes and...

Words: 793 - Pages: 4

Premium Essay

The Effectiveness of Jantro as Security Provider

...THE EFFECTIVENESS OF JANTRO SECURITY AGENCY AS A SECURITY PROVIDER IN GREENFIELD CITY, STA. ROSA CITY, LAGUNA A Thesis Presented to The Faculty In Partial Fulfillment of the Requirements for the Degree Bachelor of Science in By March 2014 ACKNOWLEDGMENT The researcher would like to thank the following individuals and organizations for making this thesis possible. His instructor, Mr. , for refreshing the researchers’ minds regarding the value of research; The JANTRO Security Agency, for their assistance in the providing the data for this research; The librarians, for the use of available materials related to the study; Their loving friends and classmates, for their continued support and guidance; More importantly to the ABSOLUTE SPIRIT, who is the source of his constant inspiration, knowledge and wisdom. The Researcher Chapter 1 INTRODUCTION Background of the Study Security is essential for both residential property and commercial property in this day and age – and many people are turning to security guards. Security guards are not police, they work for private companies, usually to provide 24/7 protection of assets, and occasionally, people. They are able to focus their entire effort to this task, as they are not patrolling, checking drivers for various infractions or anything else that police do. Businesses would be wide open to criminal activity without security officers, because there would be little protection...

Words: 12620 - Pages: 51

Premium Essay

Master Student

...Royal University of Law and Economics Case Study 26 “JetBlue Airways IPO Valuation” Lecturer: Kou Lim Hong Prepared By: 1. Ms. Khoun Davy 2. Ms. Khoun Dalin 3. Ms. Chiem Sothana 4. Mr. Soksithika 5. Mr. Oag Sothearith 6. Mr. Mov Vandara MFM, Group 2 team 6 2011-2012 Outline of The Presentation I. II. Introduction of Case Study Main Problem III. Literature Review IV. Case analysis V. Conclusion Outline of The Presentation I. II. Introduction of Case Study Main Problem III. Literature Review IV. Case analysis V. Conclusion Introduction of Case Study JetBlue Airway Background  JetBlue airways are a low cost airline established in July 1999 by David Neeleman.  David Neeleman was experienced in the operations of airline and start up airlines.  The airline was to provide new levels of service in the airline travel industry, concentrating on customer service and low fares. Introduction of Case Study JetBlue Airway Background  David Neeleman plan was to commit to innovation in people, policies and technology to keep the companies planes full and thus the company profitable. To ensure this goal and the company’s future David Neeleman assembled and impressive management team and group of investors. JetBlue’s COO was to be David Barger ex-vice president of Continental Airlines. John Owen who was executive vice-president and treasurer of Southwest Airlines agreed to become JetBlue’s CFO. Introduction of Case Study JetBlue Airway Background  David...

Words: 982 - Pages: 4

Premium Essay

Afdg

...|Fundamentals of Securities and Futures Regulation | | |Module Code |BAF2407 | |Module Year |2010-2011 | |Module Value |3 | |Module Hours |Lecture | |30 | | | |Tutorial |15 | | | |TOTAL | |45 | | | | | | | | |Pre-requisites |Nil | |Co-requisites |Nil | |Module Aims |To provide students with an understanding of the rules and regulations in regulated | | |activities in Hong Kong. | |Exemption Criteria |Granted on a case-by-case...

Words: 717 - Pages: 3

Premium Essay

Water Eu

...Case Study Assignment No. ENG401-03-013-01: A Year of Water 1 2 Case Study What is a Case Study? There is no universally accepted definition for a case study, and the case method means different things to different people. Consequently, all case studies are not structured similarly, and variations abound in terms of style, structure and approach. Case material ranges from small caselets (a few paragraphs to one-two pages) to short cases (four to six pages) and from 10 to 18 page case studies to the longer versions (25 pages and above). A case is not a problem. A problem usually has a unique, correct solution. On the other hand, a decision-maker faced with the situation described in a case can choose between several alternative courses of action, and each of these alternatives may plausibly be supported by logical argument. To put it simply, there is no unique, correct answer in the case study method. Good features Case study research excels at bringing students to an understanding of a complex issue or object, and can extend experience or add strength to what is already known through previous research. Case studies emphasize detailed contextual analysis of a limited number of events or conditions and their relationships. Researchers have used the case study research method for many years across a variety of disciplines. Social scientists, in particular, have made wide use of this qualitative research method to examine contemporary real-life situations and provide...

Words: 2559 - Pages: 11

Premium Essay

Ntc 360 Complete Class

...com/product/ntc-360-complete-class/ Contact us at: SUPPORT@ACTIVITYMODE.COM NTC 360 COMPETE CLASS 1. NTC-360 ADVANTAGE OF DIFFERENT SECURITY APPROACHES 2. NTC-360 ASSIGNMENT NETWORK ARCHITECTURE 3. NTC-360 ASSIGNMENT NETWORK PROTOCOLS 4. NTC-360 CURRENT TELEPHONE SYSTEMS OF HUFFMAN TRUCKING 5. NTC-360 HUFFMAN TRUCKING COMPANY SECURITY RECOMMENDATIONS 6. NTC-360 NETWORK OUTLINE 7. NTC-360 NETWORKING CHANGES 8. NTC-360 RIORDAN MANUFACTURING 9. NTC-360 SECURITY DISADVANTAGES 10. NTC-360 Team Assignment Riordan Manufacturing - Rough Draft 11. NTC-360 Team B Service Request SR-rm-017 paper 12. NTC-360 WEEK 1 DQ 1 13. NTC-360 WEEK 1 DQ 2 14. NTC-360 Week 2 Assignment Telecommunications 15. NTC-360 WEEK 2 DQ 1 16. NTC-360 WEEK 2 DQ 2 17. NTC-360 Week 2 Learning Team Assignment Network Topologies 18. NTC-360 Week 2 Team Paper - Network Protocols The Case of Huffman Trucking 19. NTC-360 WEEK 3 DQ 1 20. NTC-360 WEEK 3 DQ 2 21. NTC-360 week 3 individual part 1 22. NTC-360 week 3 individual part 2 23. NTC-360 Week 3 Team Assignment - Network Topologies 24. NTC-360 WEEK 4 DQ 1 25. NTC-360 WEEK 4 DQ 2 26. NTC-360 WEEK 5 DQ 1 27. NTC-360 WEEK 5 DQ 2 28. NTC-360 Week 5 Team Assignment Network Infrastructure Upgrading and the Case of Huffman Trucking 29. Activity Mode aims to provide quality study notes and tutorials to the students of NTC 360 COMPLETE CLASS in order to ace their studies. NTC 360 COMPLETE CLASS To purchase this visit here: http://www.activitymode.com/product/ntc-360-complete-class/ ...

Words: 817 - Pages: 4

Premium Essay

Information Security Policy for E-Government in Saudi Arabia: Effectiveness, Vulnerabilities

...Information Security Policy for E-government in Saudi Arabia: Effectiveness, Vulnerabilities and Threats [Name of the Writer] [Name of the Institute] Executive Summary Introduction: In many countries, the implementation of the E-Government has proved to be useful in providing efficient services to the consumers. This increases the speed of the work and does not cause any unnecessary delays. All these aspects matters for the efficient service of the Government work. In the end, it proves to be beneficial for both Government and the citizens living in Saudi Arabia. Therefore, in this study, all the issues related to the Information Security Policy will be discussed in detail. The research study is worth for a number of reasons. Firstly, it will help in assessing the degree of effectiveness of the present security policy, security holes in the policy, and threats not addressed by the policy. It, in turn, would help in coming up with measures of ensuring that the policy is security-oriented, which increases citizens’ confidence in using e-government services. Literature Review: The primary purpose of producing literature review is to support the findings of this study via the theoretical justifications obtained from literature. The review revealed that in Saudi Arabia, there is the absence of agencies to monitor the accountability of e-government services. Most of the workers of offices in Saudi Arabia lack professionalism, and this is a great weakness in the implementation...

Words: 10327 - Pages: 42

Free Essay

Anthrax Vaccine as a Component of the Strategic National Stockpile: a Dilemma for Homeland Security

...POSTGRADUATE SCHOOL MONTEREY, CALIFORNIA THESIS ANTHRAX VACCINE AS A COMPONENT OF THE STRATEGIC NATIONAL STOCKPILE: A DILEMMA FOR HOMELAND SECURITY by Thomas L. Rempfer December 2009 Thesis Advisor: Second Reader: Stanley Supinski Dean Lynch Approved for public release; distribution is unlimited THIS PAGE INTENTIONALLY LEFT BLANK REPORT DOCUMENTATION PAGE Form Approved OMB No. 0704-0188 Public reporting burden for this collection of information is estimated to average 1 hour per response, including the time for reviewing instruction, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing this burden, to Washington headquarters Services, Directorate for Information Operations and Reports, 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 22202-4302, and to the Office of Management and Budget, Paperwork Reduction Project (0704-0188) Washington DC 20503. 1. AGENCY USE ONLY (Leave blank) 4. TITLE AND SUBTITLE 2. REPORT DATE December 2009 3. REPORT TYPE AND DATES COVERED Master’s Thesis 5. FUNDING NUMBERS Anthrax Vaccine as a Component of the Strategic National Stockpile: A Dilemma for Homeland Security 6. AUTHOR(S) Thomas L. Rempfer 7. PERFORMING ORGANIZATION NAME(S) AND ADDRESS(ES) Naval Postgraduate School Monterey, CA 93943-5000 9. SPONSORING...

Words: 3672 - Pages: 15

Premium Essay

Qiestion

...Fall 2010 Case Discussion Questions Instructor: Professor Edward H. Chow 周行一 Case study: financial bubble Case: Trouble with a bubble (9-808-067) 1. Why did Irving Fisher believe that stock prices had reached a permanently high plateau? 2. Why did the stock market crash in 1929? 3. Why did influential individuals like Fisher, Keynes and Rockefeller believe that the downturn would only be temporary? Case study: investment banking business and global financial crisis Case: Investment banking in 2008 (A): Rise and fall of the Bear (KEL378) 1. What role did Bear’s culture play in its positioning vis-à-vis its competitors, and what role might that culture have played in its demise? 2. 2. How did Bear’s potential collapse differ from that of LTCM in the eyes of the Federal Reserve? 3. What would Bear have done differently to avoid its fate? a. - In the early 2000s? b. - During the summer of 2007? c. - During the week of March 10, 2008? 4. Who stood to benefit from Bear’s implosion? 5. Is market perception of liquidity more important for an investment bank than it is for an traditional manufacturing or distribution business? If so, why? 6. How could Bear have addressed perceptions of its liquidity? Could it have stopped the run on the bank, and if so, how? 7. Did Bear’s failure undermine the viability of so called “pure-play” investment banks? 8. What role should the Fed play in maintaining order in world securities markets? Case: Investment...

Words: 1896 - Pages: 8

Premium Essay

Case Discussion Questions

...Investments Fall 2014 Case Discussion Questions Instructor: Professor Edward H. Chow 周行一 Case study: financial bubble Case: Trouble with a bubble (9-808-067) 1. Why did Irving Fisher believe that stock prices had reached a permanently high plateau? 2. Why did the stock market crash in 1929? 3. Why did influential individuals like Fisher, Keynes and Rockefeller believe that the downturn would only be temporary? Case study: investment banking business and global financial crisis Case: Investment banking in 2008 (A): Rise and fall of the Bear (KEL378) 1. What role did Bear’s culture play in its positioning vis-à-vis its competitors, and what role might that culture have played in its demise? 2. How did Bear’s potential collapse differ from that of LTCM in the eyes of the Federal Reserve? 3. What would Bear have done differently to avoid its fate? A. - In the early 2000s? B. - During the summer of 2007? C. - During the week of March 10, 2008? 4. Who stood to benefit from Bear’s implosion? 5. Is market perception of liquidity more important for an investment bank than it is for an traditional manufacturing or distribution business? If so, why? 6. How could Bear have addressed perceptions of its liquidity? Could it have stopped the run on the bank, and if so, how? 7. Did Bear’s failure undermine the viability of so called “pure-play” investment banks? 8. What role should the Fed play in maintaining order in world securities markets? Case: Investment banking...

Words: 1913 - Pages: 8

Premium Essay

Cis 524 Week 7 Case Study 3

...A++PAPER;http://www.homeworkproviders.com/shop/cis-524-week-7-case-study-3/ CIS 524 WEEK 7 CASE STUDY 3 CIS 524 Week 7 Case Study 3, Case Study 3: Security Due Week 7 and worth 100 points A large, fast-food chain unveiled a new touch screen register for its franchises. Each cashier was assigned a user id and password combination to log in to the register. The system allowed the incorrect password to be entered four (4) times before the register would lock and require a manager to unlock it with a key card. To prevent unauthorized access, the registers would lock after three (3) minutes if the screen was not touched. When the register locked, only the cashier who was logged in prior to it locking could unlock it without a system restart. After a few days in operation, restaurant managers started complaining about the amount of time they were spending unlocking the registers. Some cashiers were forgetting their user Id and password, so other cashiers would log in for them. It also seemed that the button layout made it easy for the cashiers to key in the incorrect password. The managers also complained that cashiers would leave for a break or end their shift and forget to log out of the locked register. The managers would have to reboot the system, a three to five (3-5) minute process in order for the next cashier to log in. Additionally, managers noticed that grease was building up on the touch screens, making them less responsive. Write a five to eight (5-8)...

Words: 638 - Pages: 3

Premium Essay

Books of Ark

...Interested in learning more about security? SANS Institute InfoSec Reading Room This paper is from the SANS Institute Reading Room site. Reposting is not permitted without express written permission. Case Study: Critical Controls that Could Have Prevented Target Breach In December 2013 over 40 million credit cards were stolen from nearly 2000 Target stores by accessing data on point of sale (POS) systems. This paper will explore known issues in the Target breach and consider some of the Critical Controls that could have been used to both prevent this breach and mitigate losses. AD Copyright SANS Institute Author Retains Full Rights Case Study: Critical Controls that Could Have Prevented Target Breach GIAC (GSEC) Gold Certification Author: Teri Radichel, teri@radicalsoftware.com Advisor: Stephen Northcutt Accepted: August 5th 2014 Abstract In December 2013 over 40 million credit cards were stolen from nearly 2000 Target stores by accessing data on point of sale (POS) systems. This paper will explore known issues in the Target breach and consider some of the Critical Controls that could have been used to both prevent this breach and mitigate losses. From what is known about the Target breach, there were multiple factors that led to data loss: vendors were subject to phishing attacks, network segregation was lacking, point of sale systems were vulnerable to memory scraping malware and detection strategies employed by Target failed. A possible...

Words: 8983 - Pages: 36

Free Essay

Finance

...MGT 227 Fixed Income Securities and Markets Instructor: Sukwon Thomas Kim Office: Anderson Hall 242 Phone: (951) 827 4995 Fax: (951) E-mail: sukwonk@ucr.edu Quarter: Spring 2014 Lecture time: MW 8:40pm – 10:00pm Classroom: ANDHL 118 Course Website: http://ilearn.ucr.edu/ Office Hours: MW 2:00pm – 4:00pm SoBA Mission Statement Our mission is to develop diverse leaders, propel research-based innovation and promote the sustainable growth of Inland Southern California within the global economy. We harness the powerful resources of UC and our location at the nexus of commerce to create a laboratory for education, research, and productive partnerships across economic enterprises. The strategic activities that propel our mission include: • Conducting basic and applied research in management that explores and informs the creation, development and management of growth; • Providing degree programs that prepare our students to be effective managers and responsible community leaders with a deep understanding of the dynamics of growth in both a regional and global context; • Partnering with business and community leaders through a shared commitment to exemplary growth; and • Delivering educational programs to executives and the public at large that respond to the needs of our local, state, national, and international communities. MBA Program - Learning Goals Professional Integrity / Ethical Reasoning Skills Students will be able to recognize ethical issues, demonstrate familiarity with...

Words: 1081 - Pages: 5

Premium Essay

Cis 462 Case Study 2: Scada Worm

...CIS 462 Case Study 2: SCADA Worm Follow Below Link to Download Tutorial https://homeworklance.com/downloads/cis-462-case-study-2-scada-worm/ For More Information Visit Our Website ( https://homeworklance.com/ ) Email us At: Support@homeworklance.com or lancehomework@gmail.com Case Study 2: SCADA Worm Due Week 6 and worth 100 points Protecting the nation’s critical infrastructure is a major security challenge within the U.S. Likewise, the responsibility for protecting the nation’s critical infrastructure encompasses all sectors of government, including private sector cooperation. Search on the Internet for information on the SCADA Worm, such as the article located at http://www.theregister.co.uk/2010/09/22/stuxnet_worm_weapon/. Write a three to five (3-5) page paper in which you: 1. Describe the impact and the vulnerability of the SCADA / Stuxnet Worm on the critical infrastructure of the United States. 2. Describe the methods to mitigate the vulnerabilities, as they relate to the seven (7) domains. 3. Assess the levels of responsibility between government agencies and the private sector for mitigating threats and vulnerabilities to our critical infrastructure. 4. Assess the elements of an effective IT Security Policy Framework, and how these elements, if properly implemented, could prevent or mitigate and attack similar to the SCADA / Stuxnet Worm. 5. Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do...

Words: 425 - Pages: 2