SECURITY STRATEGIES

1
SECURITY STRATEGIES

• DIFFERENT TYPES OF HARDWARE TO CONSIDER
• DIFFERENT TYPES OF SOFTWARE
• (CRITICAL MISSION SYSTEMS)
• DIFFERENT TYPES OF OPERATING SYSTEMS
• WE MUST THEREFORE CONSIDER
• COST, PURCHASING STRATEGY, DEVELOPMENT
  STRATEGY, ACCESS CONTROL, PHYSICAL SITE AND
  BACKUP PROCEDURES.

2

• NETWORK ISSUES
• Can the signals be diverted, interfered with ?
• What kind of links/cabling are using ?
  (vulnerable ?)
• Are we employing data encryption
• Have we got un- interruptible power supplies
• Can we cope with demand ?
• Who has what access rights ?

3

• MEDIA ISSUES
• TYPE OF MEDIA - TAPE, DISC, CD, HDSS
• COST, SENSITIVITY OF DATA STORED
• SPEED OF RETRIEVAL (FREQUENCY OF RETRIEVAL)
• STOREAGE REQUIREMENTS (DECAY)
• ACCESS INTERFACE (PROHIBITIVE ?)
• MEDIA LIBRARY ? ( CONTROL, ACCESS, COSTS,
  MAINTENANCE)

4

• BACKUP, RECOVERY, ARCHIVING - REMBER, DATA LOSS
  CAN OCCUR BECAUSE OF
• APPLICATION ERROR
• OS ERROR
• HARDWARE FAULT
• HUMAN OPERATOR ERROR
• ENVIRONMENTAL PROBLEMS

REMEDIES SOUND BACKUP STRATEGY - REGULAR,
COMPREHENSIVE, OFF SITE, LOG FILES, HOT ROOM,
COLD ROOM
5

• PHYSICAL SECURITY
• ENVRIONMENTAL CONTROLS - FIRE, WATER, STATE OF
  BUILDING, EARTHQUAKE
• PERIMETER, ADMIN, PHYSICAL CONTROLS
• CONTIGENCY PLANS (DISASTER RECOVERY PLANS)
• RISK ANALYSIS