Computer and Network Security Content

Computer and Network
Security

Content
• Introduction
• Physical Security
• Network Security
• Access Control
• Host Security
• Securing Data
• Applications
• Policies, Procedures and OnGoing Assessment
• Expectations

Introduction
• The purpose of this presentation is to secure the computer
and network of the organization.
• The aim of submitting this presentation is to win the contract
for conducting the security of the system.
• The company is a manufacturing company, which manufac-
tures the medical equipment for soliciting the bids for hiring
the staffs for conducting the security and developing the IT
security policy for improving the security of the computer and
network.

Physical Security
• Risks assessment
• Analysis of business impact
• Work with legal department
• Acceptable risks level
• Baseline after setting risk level (Perlman, Kauf-
man & Speciner, 2016)
• Performance level and requirement
• Counter measure

Physical Security (Contd..)
• Access to the IT equipment room an the server room
must be restricted.
• Warning or restriction signs need to be placed at the
entrance of those rooms (Chen et al., 2015)
• The IT equipment room and server room should be
fireproof and secure.
• Those rooms need to be monitored by CCTV.
• The inventory of the server room or IT room need to
be up-to-dated.

Network Security
• Assets of the network
• Security risks
• Security tradeoffs and requirements (Acemoglu, Malekian
& Ozdaglar, 2016)
• Security plans
• Security policies
• Process to apply the security policies
• Strategy of technical implementation