Infrastructure and Security: Protecting Data Assets in IT Networks

Infrastructure and Data Security

Data is the most valuable asset for a data collection and analysis company. Therefore, the security of this data should be of utmost importance to the organization. The context of data determines its overall value. Information technology for any company is valued based on its ability to present, store, analyze, manage, and protect data in order to support the company's operations. Data may differ in value depending on its type, but all data should be kept safe at all times. The value of data is assessed according to the usability of that data. While any data can be considered valuable, corrupted or incomplete data would not be useful to any company (Chou & Sengupta, 2008). There is therefore a need to ensure and guarantee the safety of data at every stage.

The IT infrastructure that is put in place should be aimed at capturing, storing, and securing data in its entirety. This means that data should be verified for correctness, and when stored, there should be systems in place to ensure that storage is not interfered with in any way. Storage systems should also maintain backups to ensure that data is always secure and available even if one storage unit fails.

Data transmission should be secure to ensure that transmitted data cannot be accessed by unauthorized parties during transit. The infrastructure used for data transmission will directly determine how secure that data is while in transit. Strong controls must be in place to guarantee data safety at all times. The nodes used to transmit data should also be securely configured, with adequate security measures in place to safeguard data before transmission.

Network Topology: Logical and Physical Layouts

A logical layout shows the logical aspects of a network. This includes logical networks, assigned IP addresses for various hosts and devices, routing tables, and other related items. In a logical diagram, details regarding actual interfaces and physical cables are not required and are mostly excluded. A physical layout, by contrast, shows the physical location of devices and the connections between devices participating on the network. These diagrams depict workstations with small computer icons, servers with full tower cases, and rectangular boxes used to represent switches and similar devices.

These diagrams and layouts are vital for security, troubleshooting, and management purposes. When troubleshooting, it is easy to consult the physical layout and determine where a fault might exist (Huy & Ahn, 2015). This also makes it easier to isolate a problem area, as the network is well laid out and presented diagrammatically. Problem resolution is faster because devices can be easily identified and replaced.

Security is also strengthened, as the visual representation of the network allows one to quickly identify where there is likely to be a security concern. It is far easier to understand a visual representation of the network than to physically attempt to picture the layout by visiting different locations. With a clearer understanding of the network, one can identify potential security loopholes and seal them more effectively.

Management of the network is similarly improved. Through illustration, one can identify the placement of servers, paths to the internet, and firewalls. This allows administrators to determine the most feasible method for placing servers and other devices on the network. New network administrators can identify devices and their placement quickly. A physical illustration is also beneficial for upper management, as it allows them to understand how devices have been set up without requiring deep technical knowledge.

Confidentiality: Controlling Access to Sensitive Data

Confidentiality is roughly analogous to privacy. Measures should be taken to ensure that sensitive information is only available to those who are authorized to access it. Security levels will therefore be defined to determine the access privileges of each individual. Data will also be categorized based on the type and potential damage that could result if the data fell into the wrong hands. Policy will determine the sensitivity classification of data based on established data governance policies, restricting access accordingly (Ibrahim, Hamlyn-Harris, & Grundy, 2016).

Training should be implemented for personnel to ensure they understand the complexity and nature of the data they handle. This training will cover security risks to look out for and the various methods that could be employed by unauthorized parties to access data. Because attack methods evolve, training must be ongoing and cover a range of topics. In addition to training, access to data should be secured through unique usernames and passwords — each user will have their own unique identifier. Servers will only be accessible physically through the use of biometric security.