Organizational IT security threats, solutions, and fault tolerance management

¶ … Information Technology Security

Over the last several years, the Internet has evolved to the point that it is a part of any organizations activities. As both governments and businesses are using this new technology, to store as well as retrieve significant amounts of information. However, this heavy reliance on various IT related protocols are having adverse effects on these organizations. As they are facing increasing amounts of threats from cyber criminals that are seeking to exploit a host of weaknesses. A good example of this can be seen by looking at statistics that were compiled by the FDIC. They found, that in third quarter of 2009 there was $120 million stolen (from governments and corporations), out of this number small business lost $25 million. This is significant, because it shows how the tremendous reliance on IT-based technology, is increasing the overall vulnerability that these organizations are facing. To fully understand how an entity can protect itself requires: examining the problems, solutions to address them, the impact of the Internet on the organization's security, examining RAID fault tolerance and recommendation of what products / services should be utilized. Together, these different elements will provide the greatest insights, as to the overall scope of the challenges and solutions all organizations will face.

The Issues that Organizations will Face on the Internet

The overall challenges that an organization will have on the Internet is from: malware, botnets and spyware. Malware is a type of software program that will infect a computer system, without the owner knowing that this occurring. Botnets are a collection of software programs (called bots) that are designed to seek out and find vulnerabilities in a host of different computer systems. Spyware is similar to malware, in that it is software that will attach itself to another computer without the owner's knowledge. Criminals are using these different tools to: seek out and attack vulnerable computer systems. Where, they will use various social networking sites, to identify organizations that could have possible vulnerabilities. At which point, they will use one or a combination of them to steal sensitive information. This is important, because it shows how the biggest problem facing governments and businesses are unknown security breaches. Once this takes place, it means that there is the possibility that sensitive pieces information could fall into the hands of criminals or spies. ("The Effects of Spyware, Malware and Botnets," 2010)

Solutions to Address the Problem

The biggest problem that all organizations are going to face is, preventing security breaches from occurring. Part of the reason for this, is because human beings are the largest risk, as they will require outside access to the various tools including: e-mail, telnet, FTP, web-based systems and remote login. This is problematic, because it means that hackers can exploit this weakness, in order to gain access to sensitive information.

As a result, a comprehensive security protocol needs to be created that will address: the organization's security technology, policies / procedures, awareness and training. One way that this can be accomplished is through interconnecting the different tools together. As far as security technology is concerned, this means that a number of different tools can be used to help protect sensitive data from possible breaches to include: encryption, the use of bio metrics, multiple personal identification verifications and firewalls. ("Guide to NIST Information," 2010)

RAID Technology

You would then interconnect these different tools together through a redundant array of inexpensive disks (RAID) system. This is when you are creating a number of blocks and system backups that are interconnected. The idea is that by using this strategy, you can have multiple procedures in place. In the event that there is some kind of security breach, this will reduce the overall risks that an organization would be exposed to (by making certain that there is fail safe mechanism). The different policies and procedures should be flexible enough, to adapt to the overall changing nature of the threats. Awareness is when you are constantly monitoring for: possible security breaches and are looking at the different ways that they can occur. Training is when you are teaching and updating the staff about how to: identify security breaches along with isolating them. ("What is RAID," 2010) These different elements are important, because they are providing solutions that can address the underlying problem and are adjusting to possible threats.

Recommendation of What Products / Services should be Utilized

To prevent any kind of possible security breaches requires using a number of different tools in conjunction with one another. This means that vendors must be selected, who can provide the technology necessary, to improve the organization's security. To accomplish this task, means that different vendors must be used in conjunction with one another. The most logical choice to address the offsite security issues is: the 6998 Storage System (offered through LSI). This is a storage device that will allow the organization to be able to: storage large amounts of data and integrate the different security solutions into a single platform. As this allows for effective communication through a secure fiber optic cable and it has SATA disk drives. This will create the basic foundation for protecting the data of the organization itself.

Next, you would use different adapters, to increase the overall amount of storage space and install added security blocks. This would be purchased through IBM, as they would expand the capacity and memory (allowing for added security tools to be installed). The most suitable product is the Serve RAID M5000 series. This is a line of adapters that can expand the memory and offer a number of different security features including: added encryption technology. When you step back and look at the different tools, it is clear that they will provide improved security features and storage. These two elements are important for protecting and preventing large amounts of data from being stolen by criminals. ("6998 Storage System,"2011) ("RAID Products for System X,' 2011)

Clearly, the Internet is increasing the overall amount of security challenges that an organization will face. To address this problem, all organizations must consider using different tools and tactics. Two tools that are recommended include: the LSI 6998 Storage System and the IBM Serve RAID M5000 series. This can be used to create the basic security foundation for an organization. It could then be augmented with: improved policies / procedures, awareness and training. Once this takes place, it means that the risks have been reduced substantially.