The company is exposed to attacks because of its limited resources to maintain the defense. The company is online and is mobile connected. If it loses this benefit, it will have lost the business. It is necessary for the company to be aware of the possible threats and implement security policies to address the risks.
Logical controls would be the best safeguards for the company's information system. They involve the application of data and software to control and monitor computing systems and access to information systems. For instance, network and password-based firewalls, access control lists, data encryption, and machines for detecting system intrusion. The principle of least privilege is an important safeguard, which has been increasingly overlooked. This control requires that a system, program, or individual are not granted any extra access privileges in accessing programs to surf and read emails. When individuals are granted this privilege, they might over time, violate the safeguard. This occurs when an individual is promoted, transferred or when their duties are changes (Khosrowpour, 2004).
Case Study 14.1
In order to manage a sports arena effectively, the ICT system in place needs to facilitate the ticketing process, security and emergency dispatch, standard office connectivity, capabilities of ordering inventory, security...
The most essential of these is the point of sale hardware and software that facilitate payments for events. The arena should have a point of sale that provides customers with payment options such as the EFTPOS. The arena should also have a database for managing its activities, maintaining membership, providing booking facilities, and monitoring attendance. Additionally it is necessary to have a security structure in place that ensures the facility is monitored at all times. This security equipment includes security cameras and software to monitor and store security footage. Access controls to the facility should also enhance security by providing detection of weapons and restricting unauthorized access to the facility. The incorporation of basic accounting software also becomes critical in the management of funds collected from the point of sale. The employment of necessary equipment such as computers to facilitate this and other processes are inherent to ensure the security of funds collected (Khosrowpour, 2004).
References
Fridell, G. (2007). Fair trade coffee: The prospects and pitfalls of market-driven social justice. Toronto: University of Toronto Press.
Khosrowpour, M. (2004). Annals of cases on information technology: Vol. 6. Hershey, Pa: Idea
