ISOL631 Operations Security

Computer security has become the most vital concern for many organisations in the recent scenario due to increasing rate of cyber crimes and the advancement in the technology. As it has been found that there is no particular computer incidence handling policy currently, it is important to consider a few.

1. Making personal identity information compulsory:It should be the primary approach undertaken by the organization in order to check security standards. All the members in the organisation should be strictly guided towards the security policies of the organisation. It is recommended that the organisation gets all its important and private documents locked by securities (NVLPUBS.NIST.GOV, 2017). The vital information of all the employees that include their name, date of birth, unique identification number of their card, electronic signature and any other thing that can act for security purpose should be registered with the organisation. The access to all the vital information should not be given to all but only to few trusted employees. Moreover, these employees can only get access to the information when they enter all the necessary information required to access the particular thing.
   
   
2. Policy based on incident:In case of HIPAA and other health care–related compliance requirements, it might happen that there arises the need to get access to certain information on an urgent basis. This is when, the individual based security does not hold much importance and it is required fewer other people to get access to the important data. This is when the problems arise. In order to overcome this, it is required that none of the lower level staffs should be allowed to carry any of the communication tools that might endanger the security of the organisation. Each and every person should be scanned before they enter into the organisation (Itsecurity.Gmu.Edu, 2017). It is also further recommended to appoint a person who shall be responsible for taking care of the overall security check of the organisation that the risk of mal functioning reduces.

In order to remain safe from the part of the management of the organisation, it is indeed needed to set certain guidelines and checks on the employees. If the important data or information is lost or mishandled, the organisation surely has to suffer. Any person who is suspected of any insecure activity should be remanded and if required severe steps should also be taken, but security remains the first priority.

Reference:

NVLPUBS.NIST.GOV (2017) Computer Security Incident Handling Guide Retrieved from: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf [Accessed on: 10-8-2017]

Itsecurity.Gmu.Edu (2017) COMPUTER SECURITY INCIDENT HANDLING Retrieved from: https://itsecurity.gmu.edu/resources/upload/computerincidenthandling.pdf [Accessed on: 10-8-2017]