Ccsi460 Lab1

A Server Malware Protection Policy

Presently, the world is ever evolving into a more digital world. Paper has become a thing of the past. Even though the world has gone digital, has made things more convenient, saves time and money, but the question still remains, “How safe is it?” Security of an individual’s information, company’s information, assets, and valuable data will always be top priority in our new modern digital world. Potential security risks should not only be taken to protect against external threats, but also against internal threats. Sometimes it’s the people closest to us that can cause the most damage to our well-being. In a business aspect, the employees can be the very thing that can damage a company’s reputation and the reason a company won’t succeed financially. Each company needs a well detailed server malware protection policy to mitigate the risk of a malware attack, network security controls that prevent the infiltration of viruses, worms, and or malware, and reduce the chance that the attack originates from an internal source. This protection policy should possess the overview, purpose, scope, policy and enforcement areas.

During the assessment of the Grocery Stores Inc. scenario, the hack was committed by an internal threat from a disgruntled employee and the malware that was released onto the server snatched customer credit cards and transferred card data overseas. Key players would like to see administrators have less access to the entire network, review job description and duties so employees only have access to appropriate customer data, encrypting data over the network, and a layered security program for a hardened infrastructure. This server malware protection policy will try its best to propose solutions for key player’s concerns. The overview of this policy is to provide professional management to Grocery Stores, Inc. Servers that mitigate the risk of a malware attack, prevent the infiltration of viruses,...