Our Company Network Security Plan

Developed August 2010

Andre Bryant

Table of Contents

Security Threats and Risks 3
Types of Threats 3
Mitigation Strategies 3
Security Policies 3
Physical Access 3
Data Access 3
Security Laws 3
Law 1: 3
Law 2: 4
Law 3: 4
Disaster Recovery 4
Backup Policies 4
Testing 4

Security Threats and Risks

Types of Threats

• Trojan Horses

• Viruses

• Hackers

Mitigation Strategies

• Firewalls

• VPN access and protocols

• Strong Technology policy with strict accountability

Security Policies

Physical Access

Technology policy will allow the IT assign identification numbers to each employee. These numbers will assign access to each employee as well as track employee internet usage. This will also allow restriction to certain sites that are not filtered by the system.

Data Access

All traffic will be filtered through the firewall. We will also implement a network usage list that will let all users know what areas are restricted (hp.com).

Security Laws

Law 1:

As part of our company’s network security policy, we are requiring the use of IMAP exclusively. IMAP and SMTP must be routed through a firewall (hp.com).

Law 2:

No trafficking or usage of copyrighted or restricted files or software. The penalty for violation of this policy could result in immediate termination (klariti.com).

Law 3:

Passwords and certificates must be changed every thirty days duplicate password will be prohibited (www.microsoft.com).

Disaster Recovery

Backup Policies

Implement and purchase on online back-up system such as Windows Disaster Recovery. This system will auto-backup many of the programs and allow employees to back=up critical system work and it will help cut down on cost because it requires no storage.

Testing

We will implement a systems test every quarter as part of our network maintenance plan.

References

http://www.hp.com/sbso/productivity/howto/security/plan_it.html

http://www.klariti.com

http://www.technet.microsoft.com/en-us/library/cc960627