UofCumberlands Case Scenario for Rationale: Importance of Windows Access Control &bAuthentication

/in /by

Communication Policy Procedure Guide

Learning Objectives and Outcomes

Develop a procedure guide that tests the effectiveness of current security controls and satisfies an organizaiton’s communications policy.

Assignment Requirements

Carrying forward the scenario of Ken 7 Windows Limited, let’s assume that Ken 7 Windows Limited has completed the implementation of the new enterprise resource planning (ERP) software. The planning functions involve transmitting information that would be valuable to competitors, such as cost, pricing, and manufacturing information. Since planning functions involve sensitive information, Ken 7 Windows Limited created the following policy:

“To protect planning-related information from leaking outside Ken 7 Windows Limited domain, all ERP planning functions must require secure connections from the client’s Web browser to the Ken 7 internal Web server. No other connections, except from the internal Ken 7 Web server, will be allowed to the ERP application server for planning functions.”

Tasks

Based on the above information, you need to develop a procedure guide that tests the effectiveness of the current security controls. The following tasks are to be completed to develop this guide:

  1. List the steps necessary to validate that the current controls for your Web server and application satisfy the stated policy. Each step should contain three parts:
  • Action: the action to take
  • Result: the observed result of the action
  • Interpretation: what the result means

For this assignment, you can assume that the ERP software is located at the following fictitious URL:https://www.abcwindows.internal.com/erpplanning.aspx

Use the following table to list the steps. The first two actions and results are provided as examples for you. You may need more or fewer table entries than those shown below:

Action

Result

Interpretation

Access: https://www.abcwindows.internal.com/erpplanning.as…

Success

Access:

http://www.abcwindows.internal.com/erpplanning.asp…

Failure

Make sure that the steps you list in the above table verify the following conditions:

  1. Does the Web server allow only secure connections? (hint: try using “http”)
  2. Do any other Web servers (not internal) allow you to run the ERP planning software? (hint: try another server, such as www.abcwindows.com)
  3. Describe the process for a new client computer to gain access to the ERP planning functions.

Compile the results from the above two tasks in a procedure guide that tests the effectiveness of the current security controls.

Required Resources

  • Text Sheet: Case Scenario for Rationale: Importance of Windows Access Control and Authentication (ts_accesscontrol)

Submission Requirements

  • Format: Microsoft Word
  • Font: Arial, 12-Point, Double-Space
  • Citation Style: Follow your school’s preferred style guide
  • Length: 2–3 pages

Self-Assessment Checklist

  • I have explained secure connection and its establishment requirements.
  • I have provided a proper rationale while giving the sequence of steps that will verify whether or not the controls are working to require secure connections.