Security



 

 

 

 

 

P7 (Task 1) 

50 users and no log on to the network

There are many problems with this. There are 50 users in this company and anyone of them within the company have access to someone else’s information, data and private information which they have on there computer. This is breaking the Data Protection Act. Also people in organizations should have different access levels where they can view things that other people in the company cant. Everyone should have log on details such as a username and password by not having this for your company this is breaking the Computer Misuse Act.

 

Unrestricted internet access

Unrestricted internet within this company means that anyone can do what they want while using the internet. This is a bad idea because it means that members of staff could get districted and get no work done. This can lead to a Virus, Trojans, Worms and Spam

 

Staff is allowed to install and remove software

This can cause the company money as for most software’s you need to have a license and to get a license you need to buy it. As staff can remove software they could remove software which the company has bought a license for. Installing software can lead to distraction as anyone can download games and not get and work done for the company. Also by installing software this can lead to viruses which may be safer and destroy all the computers within the company.

 

Data is backed up once a month

Data being backed up once a month can cause trouble if someone loses there work they might not be able to get it back. Data should be backed up daily even twice a day depending on how big the company is.

 

Data tapes are kept secure in a locked plastic box on top of the server

First of all data should be kept in a secure fire proof safe. By keeping data on top of a server this means that anyone can take it. Also servers tend to over heat and because the data is kept in a plastic box this could lead to the box melting and all the data getting destroyed.

 

The company keeps records in a database on customers such as:

v  Purchases

v  Account numbers

v  Bank details

v  Customer names and addresses

v  Purchase history

All staff has access to this information. This is private information and shouldn’t be seen by all the members of staff. This can lead to identity theft or even staff might give this information out to the public such as the addresses of the customers. To prevent this, the company should have access levels where only certain people can see this information.

The Data Protection Act controls how your personal information is used by businesses or the government. This means that this businesses is breaching the Data Protection Act as members of staff have access to all information and occasionally the manger has heard staff providing personal information to others over the phone

 

Email is available to all

Everyone who works in the company has access to use emails. This can cause a distraction as people could be sending emails to friends, etc.

 

IP address log is not kept of sites visited

This means that anyone can visit websites and no one would know. This is a bad idea as workers can be browsing the internet and employers wouldn’t know.

 

No firewall is in place

A firewall is software that scans your computer when you’re using the internet. The reason to have a firewall is to protect your computer from viruses. As this company has no firewall the left there computers to be attacked by many viruses, bugs etc. This can cause problems with computers.

 

Downloads are not monitored

As downloads are not monitored anyone can download something from the internet. This can be a distraction because workers could be downloading games and not do any work or someone might mistakenly download a virus which can cause problems to a computer

 

Entrance doors are not protected by keypad etc

This allows anyone from the street to walk in. This can mean that people can steal items and just walk out with them.