Security Monitoring
Mobin Bahrami
University of Phoenix
Information Systems Risk Management
CMGT/442
June 22, 2012
Brian Hoff

Intro Security monitoring is an important factor in keeping any organization network safe as various attacks are on a rise. A company constantly must practice monitory techniques to keep their data safe. " The first step is to scan the internal and external environment and identify information technology risks before they become a problem. The key is to be proactive rather than reactive" (Marilyn Greenstein). Different organization consist of many applications that require a certain level of security measures and risk assessment. To determine the associated risks within an organization each application needs to be thoroughly reviewed. Also risks may vary between internal and external applications. Many organizations remain profitable and grow by creating a good mixture of information technology and e-commerce. E-commerce focuses mainly on the product marketing and Internet sales, while information technology (IT) team handle all aspects of the organizations network. Malicious attacks, natural disasters, and internal breach are all good cause to maintain a security monitoring system.
Network Security Systems Security event monitoring involves monitoring activities that occur on a computer system such as, recording information and analyzing recorded data to identify any potential risks. Organizations must have a secure network to stay in business. The internal network in an organization include servers, data, applications, and equipments used within the company. The security of the internal network should consist of hardware and software. An organization must keep the employees and customers data within the network safe. Also the possibility of worms and viruses increase as the calls are responses to instant messaging, and e-mails in a company as well as the use of a wireless system allows possibilities for external attacks. The combination of content filtering, intrusion prevention, and firewall will help an organization to monitor their network.
Content Filtering Content filtering can prevent loading certain websites, and block spam e-mails at various filter levels including client-side and server-side. These types of filters are customizable software installed on a computer giving different access rights on a group level such as an employee and an executive.
Intrusion Prevention system Intrusion prevention system (IPS) monitor network activities for potential malicious activity. Once IPS identifies any malicious activity it blocks that activity and reports it to the system administrator. Also IPS can send an alarm after dropping the malicious packets, and resetting the connection from the offending IP address.
Firewall
A firewall is a different type of filer, which prohibits incoming and outgoing data while allowing the approved information. Also the connection that firewall prevents could be hackers attempting to gain access to the network. Internal IT It is the IT team task in maintaining the network and constantly monitoring internal and external activities in an organization. Activities can consist of websites accessed by employees, types of viruses and worms being removed, managing access to the network, individuals accessing the building, and external attempts logged by an intrusion device. Also documentation of all activities needs to be handled by the IT team. It is imperative that IT associates stay up-to-date in compliance with federal documentation and security laws because the activities within the network can be audited at any given time. Also the logged and monitored information can act as a way to strengthen the network security in a company. Activity logs allows the IT team to react with additional security and review what types of attacks could pose a threat.
E-commerce
E-commerce has significantly improved and grow revenue for many corporations. E-commerce applications allow companies to streamline online transactions between buyer and seller by decreasing operating costs and increasing customer satisfaction. E-commerce applications require critical networks to accommodate video, voice, and data traffic as the numbers of users increase the need for greater performance and support is necessary. As a network in a company enables more applications and are available to more users, the applications become more vulnerable to security threats. To ensure e-commerce transactions are not compromised security technology play a major role, and there are four categories that must be addressed: * Authentication ensures the safety of the systems and data by blocking access to unauthorized users while allowing users access. * Authorization allows only the user to change or modify within an account. * Encryption prevents third parties from recovering the original information, which cannot be recovered without access to the key. * Auditing keeps a record of operations such as, purchasing a merchandise.
Human Resources Human resources are vital resources in any company to succeed business needs and support the employees to meet their objectives. Employees should be trained and motivated by the management team to achieve their potential. The data accessed by HR and management team will have the identity protection such as, username and password to gain access to company system. The level of access by employees will be limited compare to HR and management, which allow associates information to remain secure on all levels.
Conclusion
This paper covered the best security practice and security monitoring within a company. Companies that develop a security monitoring measures will need to follow practice methods and have an organizational structure. " Continuous monitoring and review of risks is an important part of implementation, particularly for large projects or those in dynamic environments. It ensures new risks are detected and managed, and that action plans are implemented and progressed effectively" ( Dale F. Cooper). Network security should be logged, monitored, and adjusted on daily basis to be effective. For example attacks that are recovered must be reviewed as learning opportunities for the IT team. The use of IPS allows administrator to take the appropriate measures and prevent risks in early stage. Finally, the more up-to-date a company network security remains, it decrease the vulnerable risks, meaning there is never a complete security in an organization.

References
Dale F. Cooper. (2005). Project Risk Management Guidelines: Managing Risk in Large Projects and Complex Procurements, 1e: Monitoring and Review. Retrieved from Dale F. Cooper, CMGT/442 website.
Marilyn Greenstein. (2002). Electronic Commerce: Security, Risk Management, and Control, 2e: Risk Management. Retrieved from Marilyn Greenstein, CMGT/442 website.