NT2580
Unit 1 Assignment 2
Internal Use Only

Here at Richmond Investments we need to ensure we meet a data classification standard when it comes to our employees accessing the internet from work provided computers and having access to privileged work related data. Under this standard we will implement standards for the LAN Domain, Workstation Domain, and the User Domain. For the LAN Domain we will need to secure the wiring closets, data centers, and computer rooms are secure. For access to these areas personnel will have to have the proper credentials and without them they will not be allowed access. We will need electronic door locks with a push button code. This would ensure that nobody can get into those rooms without that code. For the Workstation Domain we will require user name and passwords on all computers. This will ensure that access to the system will only be available to those that have already been added to the network by an IT Administrator. We will keep the computers up to date with current anti-virus software and regular monitoring. Only approved devices will be allowed to function with the workstations. This will eliminate possible outside threats from getting any data off the network in case they do gain access to an unlocked workstation. For the User Domain we will have an employee manual and acceptable use policy for all employees to follow. Each employee will be placed under the group in which they work for and only have access to the data that they need. Yearly security training will be given to make the user aware of their responsibility when handling work related material. Any violation of this policy will result in probation or even termination. The security of our network is very important to the company. We must secure our investments and do everything we can to prevent data from getting into the wrong hands. Failure to follow these standards could result in the loss of classified information. Loss of hardware could also occur if certain websites were to be accessed and virus’s or other malicious attacks were to be allowed. All of these steps will help keep those attacks and other hacking attempts from being able to happen.

Bibliography
Angelo State University IT Policies Data Classification Standard. (n.d.). Retrieved Sept 27, 2012, from Angelo State University: http://www.angelo.edu/services/technology/it_policies/dataClassificationStandard.php
Ram, S. (2008). Data Classification Guidelines. Retrieved 09 28, 2012, from Maravis.com: http://www.maravis.com/library/data-classification-guidelines/