Associate Level Material
Appendix C

Introduction

Student Name: Pete Lorincz

University of Phoenix

IT/244 Intro to IT Security

Instructor’s Name: Tom Joseph

Date: June 10, 2012

Introduction

Due in Week One: Give an overview of the company and the security goals to be achieved.

1 Company overview

As relates to your selected scenario, give a brief 100- to 200-word overview of the company.

The Bloom Design Group which provides services throughout the globe and has two locations in the United States, located in Los Angeles, and New York. The corporate office is located in New York. The company offers customers a virtual decorating tool for their clients to create their specific designs. The website allows the interior designers to access the client files and company style guides along with the ability to electronically process orders for design materials and furniture. A secure login and password is required from the designers to access the website and its many features. The employees work remotely to access the corporate network use a VPN.

2 Security policy overview

Of the different types of security policies—program-level, program-framework, Issue-specific, and system-specific—briefly cover which type is appropriate to your selected business scenario and why.

The implementation of the system-specific policy would be the proper choice for Bloom Design Group. The system-specific policy is required because Bloom Design has customers and designers who access the website at all times. The amount of access from different users requires the system-specific policy to become enacted.

3 Security policy goals

As applies to your selected scenario, explain how the confidentiality, integrity, and availability principles of information security will be addressed by the