Assignment: Privacy, Laws, and Security Measures
You are an information security manager for a large retail sporting goods store. The sporting goods store is involved in the following in which they:
o Maintain an internal network and an intranet protected by a firewall
o Maintain a Web server in the DMZ that is protected by another firewall
o Accept credit card sales in the store and over the Web via e-Commerce transactions
o Maintain an email server for employee email communication and communication with other business partners and customers
o Maintain a wireless network within the store
o Use RFID for inventory and theft prevention
o Maintain a Facebook presence
o Provide health screening for high blood pressure, high cholesterol, and other potential health risks
The CEO is concerned about the amount of information that is being collected and maintained within the organization.
Write a three to five page paper in which you:
1. Describe the major privacy issues facing organizations today.
2. Analyze the major privacy issues described above and compare that to the potential privacy risks facing the sporting goods store.
3. Explain the security risks and applicable laws that govern the privacy risk.
4. Describe the security measures that the organization needs to implement to mitigate the risks.
5. Use at least three quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.
Your assignment must follow these formatting requirements:
o Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; references must follow APA or school-specific format. Check with your professor for any additional instructions.
o Include a cover page containing the title of the assignment, the student's name, the professor's name, the course title, and the date. The cover page and the reference page are not included in the required page length.
The specific course learning outcomes associated with this assignment are:
o Explain the concept of privacy and its legal protections.
o Use technology and information resources to research legal issues in information security.
o Write clearly and concisely about information security legal issues and topics using proper writing mechanics and technical style conventions.