I. Introduction: Though I am new to Richman Investments I have been welcomed as family and it is in that spirit that I write this proposal for senior management who have made me feel welcome. Richman Investments has 5,000 employees and partners with various firms and companies to ensure client quality. There are four branches; the main branch is located in Phoenix, AZ and the three others are located in Riverside, CA, Bangor, ME, and Lawton, OK. Each company will be connected to the main facility
II. Branches & Corporate:
The intent of this policy is to set guidelines for all those that work at Richman Investments and to ensure that Richman Investments follows all legal and ethical guidelines as well as the federal laws which must be followed. The purpose of this policy is to define the restrictions that are placed on the company’s Internet connection and what steps will be taken to ensure that employees follow the guidelines set forth by this policy. This policy applies to all Richman Investments’ employees, contractors, consultants, temporary workers and third parties who have worked with or will work with Richman Investments. This policy applies to all equipment, networks, systems, workstations, internet, intranet, LAN-WAN, BlackBerrys that are belong in part or whole to Richman Investments. In each of the branches that you have there are always certain areas, such as accounting/finance, billing, personnel, and customer accounts. Only the users who belong to those areas will be granted access to those systems. The user will be verified by both a smart card which will be inserted into the smart card reader provided by the company as well as a 4-10 digit PIN which will be changed every 30 days to ensure PIN integrity. When the users try and enter the system using wireless devices they will be required to use a RSA token and use the PIN provided. Mobile computers will have a mobile card reader installed and users will also have to input a 4-10 digit PIN. The users in role specific areas will only be allowed to access the system for those areas and not allowed into any other area, unless specifically granted access by the manager of the area or the system administrator. Also because there are multiple locations all networked to each other, users will only have access to their location, unless granted access by a manger or a system administrator.
Managers will have to perform the same authentication procedures to include a fingerprint scan. The reason for this is simple; managers will have a higher level of access due to the fact that they will be sharing information with the other mangers at the other companies. It is this sharing that could possibly be a breach if anyone accessed their accounts. To ensure that the person who is logging in is the right person, all managers and above will be required to use a fingerprint scanner to log in to the system. With each higher level of access there is more that can be accessed and changed, increasing authentication with each level helps to ensure system integrity. Each time any person logs on to the system their log on time and user information will be sent to a log file for later analysis.
III. BlackBerries:
Each employee of Richman Investments will be issued a company BlackBerry phone. The company will be procuring three BlackBerry servers to link all of the phones to the company’s network and provide encryption for all information that is pushed to the phone using AES. A password will be required for all users to access their phone to prevent unwanted or unauthorized access. Due to the fact that not all of the users will be working at the same location, each branch will have its own server to ensure data integrity. All of the branch servers will back up to a server at the corporate office in Phoenix. Managers will have to use an additional method to access their phone and that is by using an RSA token key chain that will display an eight digit pin which changes every fifteen seconds. The reason that mangers must use this method is due to their access level. An addition application will be installed on all phones called BlackBerry Balance.
BlackBerry Balance has the ability to remotely wipe business information from BlackBerry smartphones while leaving personal information intact. Separation and protection of business and personal information on BlackBerry smartphones ensures that users cannot intentionally invalidate company data. In addition to this program BlackBerry Pushcast Software will also be implemented to create and deploy rich-media content for training modules and business updates. It is important that all employees of Richman Investments maintain their knowledge base so after each training module mandatory quizzes will be sent out to the phones. The Balance program will allow users to also personalize their device, it is important be able to have something that is tailored to an individual’s needs as well as maintaining company policies. No third party applications will be authorized to be installed on the phone, regardless of position.
IV. Malware:
Employees must use extreme caution when opening e-mail attachments received from and unknown sources. They may contain viruses, e-mail bombs, or Trojan horse code. Checking attachments with a company approved anti-virus program would minimize the risk. The program that the company uses is called Kaspersky and must be used when opening any file that was not originally on the network. Additionally all removable media will be scanned upon insertion into the workstation to prevent malicious software from being introduced to the system. Kaspersky will automatically run a full system scan once a day when the system is idle, likely when normal business hours are over.
Another program that will be used is called Malwarebytes and is a program that is free software that allows scanning for malware on the system while using minimal resources. This program like the one before will run a full system scan after normal business hours and will be scanning the system for potential threats throughout the day.