Information Security

Information Security

Data Security Issues
Data security vulnerabilities for Riordan Manufacturing exist in many of the department these are.
• Finance and Accounting
• Sales & Marketing
• Human resources
• Operations
• Legal department
Legal has classified documents that are available on the company’s website to all employees. Human resource has personal information about employees across the country available without any security. Finance and accounting has many documents that could be compromised that include company bank accounts and other financial information.
Purpose
To maintain the integrity of   Riordan data, in the Enterprise and all other information systems, through the establishment of a process which minimizes errors and misuse by ensuring adequate separation of duties via role assignment and ensuring adequate safeguards and manager accountability are in place for those limited situations requiring an exception. Also, to establish policy and procedures to assist agencies and other identified stakeholders in the process to request and maintain role assignments.
Role-based access control (RBAC) is a powerful means for laying out higher-level organizational policies such as separation of duty, and for simplifying the security management process. One of the important aspects of RBAC is authorization constraints that express such organizational policies. While RBAC has generated a great interest in the security community, organizations still seek a flexible and effective approach to impose role-based authorization constraints in their security-critical applications.
Separation of duty is the security principle used in multi-person control policies that shows two or more different persons responsible to complete the task and set of related task. The purpose of this principle is to oppose fraud by dispersal the responsibility of an authority for an action or task over multiple persons. The problem of separation of duty is important for several reasons because it...