I have been interning at Richman Investments for a couple months now, and I have been asked by my supervisor to write a report describing the “Internal Use Only” data classification standard of the company. Below are my findings of how these domains are affected.
The first layer that I noticed that was affected by the “Internal Use Only” data classification standard was the user domain. The user domain is the weakest layer of the IT infrastructure and this is where the personal information is created. All users must be required to sign in before accessing the network because they have access to the information. If employees don’t sign in and agree with the acceptable use policy, they will be terminated immediately. The second layer I noticed that was affected by the “Internal Use Only” data classification standard is the workstation domain. The work station domain is where users access the systems, applications and the data first. Most users connect to the IT infrastructure through the workstation domain, which is why you to login and put in a password before you are allowed to access and view the information. The third layer that I noticed that was affected by the “Internal Use Only” data classification standard was the LAN-to-WAN domain. The LAN-to-WAN domain was affected because the UDP and TCP are easily accessible because they are the entry and exit points to the WAN which make the private information easily accessible to anybody.
Fundamentals of Information Systems Security, Jones & Bartlett Learning, p.