Issue Specific Security Policy

Running head: ISSUE SPECIFIC SECURITY POLICY
Issue Specific Security Policy
Name of the Student
Name of the University
Author’s Note:

1
ISSUE SPECIFIC SECURITY POLICY
1. Statement of Purpose
The main purpose of this project is to understand as well as develop an Issue Specific
Security Policy for the organization of Cosmos. This organization of Cosmos publishes an
online newspaper that is situated in Australia (Ifinedo 2014). It has the globalized network of
all freelance reporters, who are reporting news from anywhere in the world. The clients who
wish to read the newspaper or watch live video streaming, will have to complete the process
of registration after paying smaller amount of fees. The main income of this organization is
from the advertisements that eventually contain various live or playback videos. This
organization accepts all types of advertisements from the individuals or companies, only
when it is complied with regulations, guidelines or media codes within Australia (Cheng et al.
2013). It has been estimated that more than 100,000 people would be accessing this
newspaper in beginning and gradually, the number would increase to 500,000. They are even
providing freelance reporters for the purpose of live reporting from several areas that does not
have Internet connection. Recently, they have decided to upgrade their information security
policies for the information system. This project will be helping to understand the authorized
uses and prohibited uses of the given case study. Moreover, the systems management,
violations of policies, reviewing and modification of policies with limitations of liabilities
will be covered here (Berger 2014). The final part of this project provides assumptions and
their proper justifications.
2. Authorized Uses
Cosmos is the online newspaper publishing organization that provides freelance
reporters who work for them in every corner of the world. The main headquarter of this
organization is in Sydney, Australia and mainly gets income from the advertisements,
containing live as well as playback videos (Sommestad et al. 2014). The authorized users of

2
ISSUE SPECIFIC SECURITY POLICY
this particular organization mainly refer to those users, who are maintaining and following all
the rules and regulations. The authorized users of this particular organization are the
registered members or clients of the newspapers. They are claimed as the authorized users
since; they are using the service of Cosmos, only after registering themselves with the
newspaper (Yeo, Pak and Yang 2013). Thus, they are following the rules. The other
authorized users are the organizational employees. Recently, the permanent employees are
Chief Executive Officer, the Finance Manager, the human Resources Manager, the Technical
Manager, and the Publishing Manager. Moreover, the Technical Manager is assisted by
twenty supporting staffs. This particular organization would be providing the most secured
and reliable services for their staffs, freelance reporters, customers and advertisers. The news
that they provide is absolutely genuine and does not provide any forged details.
3. Prohibited Uses
Security and accurateness are the two most significant requirements in Cosmos
organization (Wall, Palvia and Lowry 2013). They do not provide any type of fake news for
their customers and thus they make sure that the news they are delivering is absolutely
accurate and justified. They even provide evidence for their customers. For the purpose of
security, they only allow authorized users to access their data or information. The customers,
who are wishing to access the news from their website, at first, will have to register to their
organization after paying a small amount of money to the website. The prohibited users refer
to those users, who are not authorized and have not registered themselves with the website.
These types of users can exploit the news and can even sell the news to other companies
(Siponen, Mahmood and Pahnila 2014). This type of exploitation would be extremely
dangerous for the organization as they would be major losses. The prohibited uses could be

3
ISSUE SPECIFIC SECURITY POLICY
stopped after implementing various security measures to the website and the access would be
restricted.
4. Systems Management
The management of systems of any organization refers to the administration of
various distributed systems that even includes the computer systems (Crossler et al. 2013).
This systems management is eventually influenced by the initiatives of the network
management within telecommunications. It plays the most significant role in the security
system of computers.
The freelance reporters of the organization of Cosmos are provided with several
devices of telecommunications for the purpose of live streaming or reporting from those areas
that have poor Internet connection or even does not have Internet connectivity (Peltier 2013).
This systems management in Cosmos organization would be completing the tasks like
managing security, managing storage, managing virus or malware of the systems. Moreover,
the systems management also manage the capacity of network; monitor the capacity, software
inventory, installation of software and many more.
Cosmos organization has a network administrator and it is his responsibility to ensure
that the entry points are properly configured with accurate settings according to the ISSP or
Issue Specific Security Policy (Sommestad and Hallberg 2013). The ISSP also involves
configurations of authentication, encryption and authorization for the purpose of making the
security of the systems extremely higher than normal. Furthermore, the customer should
ensure the fact that the details entered by them are absolutely accurate and they are watching
the news after successful registration.