Assignment

Q1)

a) What control policy is required in order to prevent unauthorized access and damage to facilities?

b) Write 2 example controls that are required for securing Offices, Rooms, and Facilities.

Q2) Give two examples for protecting the equipment in an organization.

Q3) Email is the most preferred way of communication in many sectors currently. Apart from its advantages in communication, emails are also prone to cause various threats to the information technology framework. Explainin the various threats (at least 2) of emails being sent over the internet or a network, and the techniques (at least 2) to protect the messages sent over emails.

Q4) Describe the activities involved in log management. How to select the appropriate data to log.

Text Book: Security Program and Policies: Principles and Practices by Sari Stern Green, Second Edition.