Network Security Policy

Company Security Policy

The purpose of this security policy is to ensure the proper use of data across the network from all employees, contractors, and limited vendors.

Server 

Corporate server access is only granted to employees and contractors on the administrative team.  Backups are performed on a daily basis to a separate location and transferred to an offsite location as specified by the administrative manager.

Computers

All corporate computers are to have an approved encryption software installed to protect the contents of the hard drive.  COMPANY employees are responsible for locking the device whenever away for an extended time period.  A password protected timed screen saver must be configured at all times to ensure it is activated whenever the device has been inactive for longer than five minutes.

Confidential data

Protection of confidential data which includes but is not limited to, blueprints, employee records, and client information.  It is the responsibility of the administrative team to protect confidential data on the corporate network.  The Traps anti-virus software must be up to date and functioning properly on all devices located on the corporate network.  All devices are required to have encryption setup on their hard drives.  The network administrator is required to maintain the secured network at all times to ensure the protection of all confidential data.  If new firmware or software updates are released, they must be applied within a months’ time.  In the case of a network breach, it should be dealt with immediately and all users are to be notified.

If a COMPANY employee transmits any confidential data, the responsibility is now the COMPANY employees.  Ensuring the data is encrypted during transmission reduces the risk of multiple threats.  It is required to have the following software installed and configured, Traps Anti-Virus, Veracrpyt encryption software, and a secured network connection.  If confidential data must be transferred from its originally location off the network, then the COMPANY employee is required to encrypt the documentation before it can be transferred, sent, or moved.  A COMPANY employee will not allow any unauthorized users to view the confidential data.

Databases

Maintenance and backups are required on a regular basis to ensure the integrity of the database.  A full backup will be completed on a monthly basis, while periodic backups are completed on a daily basis.  Encryption is required utilizing the Veracrypt software, once the backup is completed.  The backups are then transferred to an offsite location on a weekly basis, by a member of the administrative team.  Maintenance is mandatory on a weekly basis and is the responsibility of the administrative team.  Database servers are required to have anti-virus software installed and functioning constantly.

COMPANY employees with database access are not allowed to share access or discuss the contents with others.  Database utilization must be done in a considerate manner and any change requests should be delivered to the manager on duty.  It is the responsibility of the COMPANY employee to safely close and exit the database when finished working with it.

Passwords

Password requirements include at least one capital letter, one number, one special character and should be a minimum of 8 characters long without multiple consecutive characters.  Any common dictionary words, name or username, and birthdates are not allowed.  Passwords must be changed every 90 days and cannot contain previous passwords.  Selecting a password that meets expectations is required and can be done utilizing phrases such as “What Would Jesus Do At All Times?”.  This phrase can be broken down into a password like so “WwJdAaT1?”.  Password managers may be used if approved by the information services department manager.  The usage of password generator can be authorized if selecting a password is too difficult.

Network equipment and configuration

Physical access to networking equipment is only provided to the administrative team, specifically the network administrator.  Configuration access and changes to networking equipment is only permitted by the networking team.  Regular firmware and software updates should be applied on a regular basis, within a month of their release.  Backups of the networking configuration are required after any modifications.

Software

The COMPANY software development team is responsible for maintaining updates, changes, and backups of all software on the network.  Anti-virus software should be deployed on all devices across the network.  All software servers, including the licensing server are required to have a static IP and constant traffic monitoring.  Administrators are responsible for access to the servers containing licensed software.  Top-Level administrators are responsible for all custom-made applications and software.

Update releases will be monitored by COMPANY employees to ensure they are applied within a timely manner.  Testing is required before the updates are applied to ensure and check their effect on the system.  A backup of the software’s current state is required before and after the update has been applied.

Equipment

It’s the COMPANY employee’s responsibility to report any damages, issues, theft, or loss of COMPANY equipment.  Every device is required to have an inventory sticker to manage the inventory and acknowledge their existence on the network, from updates, changes, and tracking.  Care and maintenance is the responsibility of the COMPANY employee’s, if it is out of the employee’s abilities, it will be reported to the information services department immediately.

Communication

The information technology system allows smooth communication, as long as the system is utilized properly.  Confidential data must not be shared with anyone who does not have the appropriate access.  The COMPANY employee must gain approval from their manager to share any data with employees outside of the department which the data resides.  Encryption software is required when sending emails to other employees and clients.

Remote accessibility

It is the employee’s responsibility for any actions performed while remotely connected to the COMPANY corporate network.  An approved VPN client is required to access the internal network whenever working offsite.  Recreational use of a device that is connected to the corporate network is not permitted and the employee is held accountable for any actions performed.

Conceptual Model

A high level conceptual model is required for planning this family reunion as it would be extremely beneficial with tracking the data involved.  The ability to track each piece of data involved such as who will be attending and to ensure everyone has a great experience at the reunion.   I have derived my family's conceptual model for planning this reunion by creating two tables specifically to contain information for each family member involved and the details of the reunion.

The entities is the data stored in each table such as their name, relationship, location, whether or not they are attending, the number of guests they are attending and then the total for each.  This will allow the ability to easily track who was invited, if they are attending and how many people they plan on bringing with them.  The second table contains the information specifically to control all the data required for the reunion party, such as the number of attendants, location, decorations, chairs, tables, activity, food, and beverages. 

The relationship of which I used between the two tables is the total number of attendants of which will be attending the reunion.  This will allow coordinators the ability to run queries and reports to ensure we obtain enough equipment and material to host the number of family members that are attending the reunion.

References

Fuller, L. U., & Cook, K. (2013). Access 2013 For Dummies. For Dummies.

Harrington, J. L. (2009). Relational Database Design and Implementation, 3rd Edition. Morgan Kaufmann.

Internet of Things

The IoT (Internet of Things) may not technically be what it sounds like the first time someone thinks about it.  Honestly, the IoT is basically the interconnection via the Internet of a computing device embedded within an everyday object, which would enable them to send and receive the data.  To simplify the information even more, there is a computer inside an everyday object with connection to the internet, this would be considered an IoT.  For example, in the consumer electronics a newer model car falls into this category, whereas there are many other devices within the automation industry also.  The base structure of IoT comes down to sensors, services, applications, networks, and computers.  Imagine, the amount of waste, cost, and loss reduction could be done if everything within an industry was managed by a computer that knew everything.

Both the automotive and US Food & Drug Administration are being affected by the recent changes to inventory and product traceability.  As the day of logging inventory with a pen in one hand and a notebook in another, is old news.  Product traceability is among us and it will require a much finer detail in ways of which are fully traceable.  This process also allows companies to measure Overall Equipment Effectiveness to identify the weaknesses within the production processes.  Although these calculations can only be collected once the data is sufficiently delivered from the entire operation and then stored reliably.  To ensure reliability wired networks are used with automation systems, for the information to exchange at fast enough speeds, all the way from the sensors to the robots.  Considering, there is use of wired networks the IT department will have to work with the engineering department to gain access to the automation systems (Pye,Andy p. 65).

Within the food processing industry ensuring the machines running time is extended throughout its lifetime, utilizing preventive maintenance could allow this.  Whereas, if preventive maintenance is not used and a machine fails, an entire batch is lost, which is expensive and destructive to efficiency.  A recently developed preventive maintenance system call the FAG SmartCheck created by Schaeffler, distinguishes and reports the first vibrations before it ever starts to fail (Andy Pye, 2014, p. 68).  This allows the owner to start repairing the system before it has a major issue to begin with.  Currently, there is already an IT interface for a brewery and beverage sector and more recently a meat processing one.  They are now creating one called “WS Bake” which will be specifically refined for the bakery industry and capture information specific to the industry.

Networks within cars, dealerships, bakeries, and even an aquatic robot network, such as the Sunrise project.  This project is designed to gather and share data on freshwater environments utilizing underwater connectivity.  Considering, this will allow robots to work together and interact with one another, some call this ‘Internet of underwater things’.  Also, because these underwater robots are unable to work autonomously with instructions sent over the internet while communicating with each other.  Just in case one or more robots have trouble with signal and cannot communicate there will be a school of robots to carry a greater number of sensors in order to cover a larger area.

Future changes possible in our lighting systems at home, work, and everywhere else.  Consider saving upwards of eighty percent of energy compared to original lighting and that’s with the lights that are supposed to be saving us energy now.  Then these are supposed to be able to survey the surroundings and then transmit the information. Currently the first generation of smart lighting that is available is mostly designed for the commercial use which can be integrated within a buildings automation system.  Within ten years, this type of lighting system could become available for everyday consumers.  The next major step is to try and integrate a better sensor and a new type of function into the lighting system such as the ability of an occupant within the room to adjust the lighting with their movements and activities.

References

Pye, A. (2014). The internet of things connecting the unconnected. Engineering & Technology, 65-70.