...McBride Financial Website Security Plan Reggi CMGT/441 April 7, 2014 University of Phoenix McBride Financial Website Security Plan Introduction McBride financial services is upgrading their website to be more interactive with clients. The goal is to create self-serve options for clients though the website and through kiosks located in the offices. McBride wants to reduce the number of employees needed to handle client accounts using this new business plan. The new plan will increase the need for data protection to ensure that customer’s personal data is kept same during all points of the application and loan process. Implementing online loan applications means customer information will be input into web forms and then transferred to the company database. This creates the potential for hackers to steal or corrupt the data and to use it to gain access to other company servers. In order to prevent this from occurring and limiting the damage done in the case of a successful attack McBride must implement a Prevention, Detection, and Recovery plan. Prevention A prevention plan for McBride will be need to include protection for the company servers and protection for client information. The first step in this plan is to establish a demilitarized zone (DMZ) to separate the web server from the company databases and other company servers. The most secure way to implement this is to use two firewalls. The first one will be set to allow necessary traffic to the web server...
Words: 1058 - Pages: 5
...Security Policy for McBride Financial Services Introduction to Information Systems Security Management CMGT 441 December 06, 2011 Security Policy for McBride Financial Services The following document was developed to respond to a request by McBride Financial Services for a security policy based perceived needs associated within the loan department and issues in implementing online loan applications (OLA). The security policy will address the current need along with any issues that may arise with their online loan application process. The majority of McBride’s customers are comprised of an affluent demographic of professionals, families looking to purchase a home, and retiree’s requesting mortgages (University of Phoenix, 2005). McBride’s customer base is largely well educated individuals who generally keep an eye on personal information and financial records and would most likely be aware of any unauthorized changes. Therefore, it is of extreme importance that McBride Financial secures this data. The areas included in the security policy for the loan department will include the following: • Physical Security Policy • Account Access Controls Policy • Data Backup Policy • Non-Compliance Policy The implementation of electronic key cards will be recommended to McBride as a source of control in the physical security area. This will restrict employees only to have access to areas they are authorized to be in. Any employee accessing an unauthorized area of the...
Words: 596 - Pages: 3
...McBride Financial Services Security Policy xxxxxxxxxxx CMGT 441 November 23, 2014 Professor xxxxxxx McBride Financial Services is a start-up loan company that will provide low cost mortgage services using state-of-the-art technology. McBride has five locations; the locations are in Idaho, Montana, Wyoming, North Dakota, and South Dakota. The clients will consist of the following: * Professionals purchasing either a primary or secondary residence. * Retirees purchasing a primary or secondary residence. * Families and/or individuals purchasing recreational properties With the type of low cost mortgage services being provided the McBride Financial Services will need to implement security polices to protect clients using the services. The Information Security requirements of Online Applications Services have to be more secure than Information Security requirements of a physical bank. Protecting user data has to be a number one priority for any online financial company. The policy will apply to all Online Loan Applications (OLA) and any outsourcing to McBride’s application provider and support staff. The best practices for OLA are as follows: * Ensure Consumers are making educated financial decisions by fully disclosing all Loan terms in a transparent and easy to understand way. * Give Consumers a chance to change their mind by maintaining a reasonable cancellation policy. * Be a company in good standing with the officials and regulatory bodies that govern you...
Words: 682 - Pages: 3
...1. Q. What are some of the social, political, and economic forces that are influencing SIA’s decision to become a learning organization? * The situation in this case study demonstrates the need to consolidate employee knowledge into one system in an effort to improve overall company performance. SIA had acquired 30 separate businesses but they were still functioning like 30 separate companies. They each still had their own set of management and well-defined procedures and policies. As a result, most of the employees had developed their own areas of expertise. In the highly competitive insurance market, SIA needed to change this business philosophy if they were going to succeed. * In the early years of the new century, many companies use behavioral approach that means they use information and techniques from the social sciences to improve organizations health and improving internal relationships, and increasing problem for solving capabilities. In that time, social and political environment is changing. If SIA Corporation keep their own political policy, and keep its own hierarchy, characterized by strong top-down administration, SIA could not able to see or compete to other organizations as competition for achieving its goal. 2. Q. If you were a specialist from SIA, how and why would you respond to the proposed changes? What steps would you suggest Jerry take to increase employee utilization of the knowledge- sharing system In particular? How can he encourage...
Words: 816 - Pages: 4
...Security Policy Marc Johnson CMGT/441 December 21, 2014 Praful Dixit Security Policy for McBride Financial Services Information Technology (IT) Security Policy I. SCOPE This IT Security Policy has been undertaken In order to safeguard sensitive, confidential, and proprietary information that is passed through the network of McBride Financial Services. The safety and security of such information is vital to the success of McBride Financial Services and any sensitive information that is compromised would be harmful to McBride Financial Services and its efforts as an organization. Use of information technology networks by employees of McBride Financial Services is permitted and encouraged where such use supports the goals and objectives of the organization. However, McBride Financial Services has a policy for the security of the information that is shared trough these networks. Employees must ensure that they: * Comply With the current IT Security policy, * Use information technology networks in an acceptable, safe, and responsible manner, and * Do not create unnecessary risk to McBride Financial Services by their misuse of information technology networks. II. POLICY STATEMENT All members, employees, guests, and individuals are responsible for adhering to this IT policy and maintaining the security of proprietary information shared on the information technology networks of McBride Financial Services. This IT Security Policy is applicable...
Words: 711 - Pages: 3
...McBride Financial Services: Loan Department Catherine Adkins CMGT 441 June 18, 2012 University of Phoenix McBride Financial Services: Loan Department Receiving a loan from a financial institution can be a stressful and challenging process. Not only is there a pile of paperwork to complete, but the waiting period for loan approval from the underwriters can be frustrating and time-consuming. With the implementation of the Internet, financial institutions like McBride Financial Services (McBride), have taken the loan application process online, which, is a time saver and reduces travel time for the customer, but resources and money are conserved through the streamlining of the entire structure of how loans are completed. The negative side to this; however, is that security issues can arise due to the application process when transferring sensitive information over an online environment. Therefore, an examination has been done of the processes and procedure to find vulnerabilities and possible weak areas that could be breached and comprised. Current Loan Process McBride currently has two methods of applying for a loan: in-person or online. Either method will eventually return the same results; however, the online application method is faster as customers have the time to fill paperwork on there on time line. There are advantages and disadvantages of completing the loan application online far outweigh the physical appearance; however, there are a few downsides...
Words: 1001 - Pages: 5
...This document is to describe the Information Security requirements of Online Application Services and Application Service Providers that engage in business with McBride Financial Services. This policy applies to any use of Online Loan Applications (OLA) and any outsourcing to Application Service Providers (ASP) by McBride Financial Services, independent of where hosted. The Online Loan Application or Application Service Provider's Sponsor must first establish that its project is an appropriate one for the OLA/ASP model, prior to engaging in any additional infrastructure teams within McBride Financial Services or any external Application Service Providers. The department wanting to use an Online Loan Application or any Application Service Providers service must confirm that the Application Service Providers chosen to host the loan applications of McBride Financial Services complies with this policy. The Business Function to be outsourced must be evaluated against the following. The requester must go through the OLA/ASP engagement process with the Information Security Department to ensure affected parties are properly engaged. In the event that McBride Financial Services data or loan applications are to be manipulated by, or hosted at, any ASP's service, the ASP sponsor must have written, explicit permission from the data/application owners. A copy of this permission must be provided to the Information Security. The information to be hosted by an ASP must fall under...
Words: 528 - Pages: 3
...Security Policy Wendy Lee CMGT/441 July 11, 2013 Marilyn Harris Security Policy A security policy is developed based on perceived needs associated within the loan department and any issues in implementing online application. McBride Financial Services located in the virtual organizations needs a security policy to protect customer information against hackers. Hackers are finding new ways to hack customer information. Identity theft is a leading crime in the world. Developing a security policy for McBride Financial Services can be demanding. Hugh McBride and Abram LaBelle of Smith’s consulting discuss the priorities for safeguarding personal information on a secure website. McBride needs a security policy to satisfy the business needs of McBride Financial Services. McBride discusses securing personal information from both external and internal threats. Majority of McBride customers are families looking to purchase a home. Loan applications are processed online. While processing loan applications, McBride Financial Services has to collect a large amount of customer information. This information may include social security numbers, birthdate, address, credit card information, background information, bank information, credit score, and etc. It is important to secure McBride financial data because McBride’s customer base is well educated individuals, who will keep an eye on personal information and financial needs. The customers will know of any unauthorized changes...
Words: 601 - Pages: 3
...Risk Assessment Introduction Sioux Falls, SD is one of McBride’s locations. McBride Financial Services utilizes sensitive equipment and toxic chemicals during its manufacturing process. These high end and dangerous items place the location at risk. Some of the threats include: use of toxic chemicals, public transportation, crime, and acts of terrorism. It is McBride’s responsibility to mitigate these threats. Use of Toxic Chemicals McBride Financial Services must control the risk of its use of toxic chemicals. “In its 2009 report Science and Decisions: Advancing Risk Assessment, the NAS recommended a process to address and communicate the uncertainty and variability inherent in a risk assessment…” (Janssen, Sass, Schettler & Solomon, 2012). Toxic chemicals not only provide a risk to the environment when mishandled, but also to the pocketbook of the organization responsible. Mishandling of toxic materials also act as a lure to the ill-intent. Crime, terrorism, and fanaticism all relish an opportunity to obtain amounts of these dangerous items. That is why McBride Financial Services must stay steadfast in securing these materials. Crime. McBride Financial services must secure their dangerous materials against crime. Mishandling of these materials results in an increased risk to crime. It not only enables crime by making them more susceptible to it, but also acts as a siren’s call. Continuous mishandling makes them vulnerable...
Words: 1455 - Pages: 6
...McBride Financial Marketing Plan Based out of Boise, Idaho, McBride Financial Services is a small mortgage lender that is in its beginning stages. The firm’s focus will be in standard, FHA, and VHA loans for home refinancing and purchasing. The company hopes to increase its offices into Wyoming, Montana, North Dakota, and South Dakota. “McBride Financial Services will be the preeminent provider of low cost mortgage services using state of the art technology in the five state area of Idaho, Montana, Wyoming, North Dakota, and South Dakota.” (University of Phoenix, 2005, 2011, para. 2). McBride Financial Services has decided to redesign it’s marketing plan so they can reach individuals that fit the profile of the type of consumer that their services are created for. Now let us look into what it will take to create a strong marketing plan for McBride Financial Services. Market Research The first step in creating a strong marketing plan is research. Researching the product is a way to find out what catches customers’ attention by looking at their actions and coming to conclusions from what is observed. Using market research is a helpful means that can save the company time, effort, and money. By performing this research, McBride will gain the opportunity to market to certain types of individuals that are more likely to purchase their service instead of wasting money advertising in a general region. One source that will be useful to McBride Financial Services is the use...
Words: 1296 - Pages: 6
...Security Policy 1. Introduction The McBride Security Policy is intended to protect its digital and physical assets as well as protect the rights and privacy of McBride Financial. This policy details best practices, company guidelines, and regulations which are to be implemented and followed from inside the scope of Information Technology. The security team has created this document to protect users from virus attacks, compromise of network systems, and any legal ramifications that may occur because of this. While responsibility is on IT security to provide these tools, McBride Financial employees must know these guidelines and follow them as they may be held liable for any violation of the contents of this policy. 2. General Use and Ownership 1. All data created by McBride's employees is the property of McBride Financial Services. McBride's data should never be placed on an unauthorized device, moved, altered, deleted, or sold without the consent of IT Security. 2. Employees are required to use good judgment when on the internet. While IT Security has implemented UTM systems to restrict the personal use of internet, employees are still responsible for any rogue executables or malware in which they download from their e-mail. If an employee feels they are visiting a website in which they should not be allowed, they should contact IT security immediately at itsecurity@mcbridefinancial.com immediately. 3. McBride IT Security has the right to monitor...
Words: 792 - Pages: 4
...McBride Financial Services Marketing Paper No name BSA/310 August 17, 2010 Mr. Jones McBride Financial Services Marketing Paper McBride Financial Services were created by entrepreneurs who envisioned an opportunity to become the premier provider of low cost mortgage using the state of art technology to assist those in the pursuit of financial independence and financial rewards. McBride Financial Services developed a mission plan with the intention of providing specialize conventional, FHA, and VA loans for home purchasing and refinancing with the intention of expanding future operation into Wyoming, Montana, North Dakota, and South Dakota(University of Phoenix, 2004). Marketing Research and Plan Today’s market makes it difficult for small business owners to attract customers and maintain customers’ loyalty because of the continuous growing and changing market. McBride Financial Services must create a marketing plan that can increase their potential for success. However, in order to achieve this McBride Financial Services will need to perform research to determine the forces related to the market and forces related to the environment with this information the company will be prepared for whatever may come his or her way. The first step in McBride Financial Services marketing research would be to analysis the market. With this analysis, there are a number of statistics and issues that the planner can use determine...
Words: 1271 - Pages: 6
...McBride Financial Risk Assessment Information Systems Security Risk Management McBride Financial Risk Assessment Overview The purpose of Risk Assessment is to identify potential risks that could impact the operation of the business of McBride Financial Services. This will analyze the approaches to be implemented for omission of avoidable risks and the minimization of the risks that are unavoidable. In this quest, team B has chosen Sioux Falls office of McBride Financial Services, which will involve a risk assessment overview of several different topics. The discussions will be the use of toxic chemicals in the vicinity of business, public transportation facilities that might handle the carriage of dangerous or hazardous substances, any potential targets of criminal activities and potential targets of terrorist activity. Toxic Chemicals Chemicals are a necessary part of any work location. They can be used in work processes, for cleaning, and other functions. Chemicals can be found in solid, dust, liquid, and gas or vapor forms. "Industrial chemicals can be described by the physical form of the chemical (that is, whether it is a dust, fume, vapor, gas, etc.)." (Chemicals in the Workplace) The company needs to identify all the chemicals used at the McBride facility. The individual chemical components should be listed for a safety review. Material Safety and Data Sheets (MSDS) will be obtained and stored onsite for all chemicals used. MSDS is available for all chemicals...
Words: 2674 - Pages: 11
...McBride Financial Services: Risk Assessment What is RISK? Risk is the probability of an undesirable event. The probability of that event and the assessment of the events predicted harm must be put into a believable outcome or scenario this will combine the set of risk, reward and regret probabilities into a predicted value for that outcome. Risk is defined as a function of three variables: 1. The probability that there is a threat. 2. The probability that there are vulnerabilities. 3. The potential impact. What is risk management? Risk management is the means of balancing the costs and benefits of any business decision. The risk management process involves identifying, analyzing, and taking steps to eliminate or reduce the loss faced by an organization or individual. Risk management utilizes many tools and techniques, including but not limited to insurance, to manage a wide variety of risks. All businesses encounter risks, some of which are predictable and controllable, and others which are unpredictable and uncontrollable. Risk Management is particularly vital for any business. Common types of losses—such as theft, fire, flood, legal liability, injury, or disability—can destroy in a few minutes what may have taken the company years to build. Such losses and liabilities can affect the day to day operations, reduce profits, and cause financial hardship. These hardships can be severe enough to cripple or bankrupt a company. Through proper...
Words: 4505 - Pages: 19
...Marketing Plan I MKT/421 May 5, 2014 Marketing Plan I McBride Financial Services is a mortgage company that offers low cost mortgage services. McBride Services is operating in five states, Idaho, Montana, Wyoming, North Dakota and South Dakota. As the world becomes technologically advanced McBride Financial Services is working hard to keep its competitive edge in the finance industry. Recently the company has decided to create an App for smart phones that will make applying for a loan easier and more convenient. The marketing research team, for the company is going to conduct the research needed to see if the need exists in the finance market. The research team will decide if creating the APP will benefit the company and be worth the financing that will be needed to get the return on investment. This APP will allow any customer interest in applying for a mortgage to enjoy a secure site from a mobile device. McBride Financial Services (MFS) goal is to be the preeminent provider of low cost mortgages using state of the art technology. Currently McBride’s Financial Services has an online mortgage application, and it is not complex. The turnaround time for an application is within one business day. MFS’s target markets are families, professionals, and retirees. Two of these potential customers has something in common, limited time. There is a skill to balancing the full schedule of a family, and finding the time for personal business as well as professional. Already...
Words: 1127 - Pages: 5
