Associate Level Material
Appendix C

Introduction
Student Name: Philip J. McCarthy
UNIVERSITY OF PHOENIX
IT/244 INTRO TO IT SECURITY
Instructor’s Name: JAMES SERSHEN
Date: 04/18/2012
1. Introduction
Due in Week One: Give an overview of the company and the security goals to be achieved.
1.1. Company overview
As relates to your selected scenario, give a brief 100- to 200-word overview of the company.
The Company I have chosen is, The Bloom Design Group. The Bloom Design Groups mission is to provide online interior design services to its customers. The company offers their customers interior design services. What sets this company apart from others is that they have a website that allows customers a chance to design and decorate their rooms to their liking in a virtual environment before spending their money. The option provided for their customers is a virtual decorating tool. With this tool customers can play around with various color schemes for each room’s floor and ceilings, as well as customizing furniture as well. Then employees are able to access the corporate network through a VPN collection to access their client files, in order to place electronic orders for the design materials and furniture.
1.2. Security policy overview
Of the different types of security policies—program-level, program-framework, Issue-specific, and system-specific—briefly cover which type is appropriate to your selected business scenario and why.
Program-Framework security policy is the best overall for this type of company. As The Bloom Design Groups network stands right now it is at a high risk for potential hackers and overall business continuity. The company has one website for both the employees and the customers to gain access to which creates a significant security risk. The company should have a secured intranet complete with a firewall and a secondary