Operations Security for Sunica Music

Operations Security For Sunica Music

Tiffany Pierce

University of Phoenix

IT/244

Intro to IT Security

October 3, 2010

10 Recommendations for a Secure Computer Room

* Before hiring employees perform background checks

* Have the “Principle of Least Privilege” put into effect

* IT staff member are only allowed in the sever room

* Use a dual mode of authentication procedures such as; passwords, access cards, door keys, or any other type of security devices

* Video monitoring of the server room exits and entrances

* Video monitoring of all the devices of the server

* Racks for the server should have locks

* All network cables should be ran through conducts to prevent any breach of cable access to the network

* Climate control of the server room

* Fire alarms should be install help prevent fire damage in the event of a fire

How the recommendations conform to the Sarbanes-Oxley Act

According to Internet Security Systems, Inc. (2004), “Safeguarding internal controls and procedures for financial reporting, as well as ensuring the confidentiality, integrity and availability of information, is no longer just a best practice for public organizations. It's a legal requirement by Section 404 of the Sarbanes-Oxley Act mandates that all public organizations demonstrate due diligence in the disclosure of financial information and implement a series of internal controls and procedures to communicate, store and protect that data.

Public organizations are also required under Section 404 to protect these controls from internal and external threats and unauthorized access, including those that could occur through online systems and networks. This level of security is necessary to ensure companies maintain data integrity for employees, customers and shareholders” (para. 1 & 2).

Separation of Duties

For Sunica Music there needs to be a separation of duties put into play because off all the confusion that goes on through each...