Module 2

1
Module 2

• Data What Measures Should be Taken to Ensure
  That Child Support Data is Protected

2
Learning Objectives

• Explain who is an authorized
  user and what is an authorized
  purpose
• Define the type of information that is contained
  in the child support system
• Describe the threats that face the child support
  program
• Describe managements security responsibilities

3
Authorized Users and Purposes

• Know who wants the information
  and for what purposes
• Understand the result if unauthorized
  disclosure happens

4
Data in SWS
Credit Bureaus

• DMV
• SESA
• IV-A
• Tax

SWS
Other SWS
5
Technology-Overview

• Where are we vulnerable?

Credit Bureau
Other State
End Users
SWS
State
FPLS
6
Technology-Overview

• Where are we vulnerable?
• Wherever data is handled

7
Viruses

• Viruses prevent normal
  operation of our computers
• Viruses spread rapidly and
  unpredictably

8
What Do Viruses Infect?

• File Infectors
• Cluster Infectors
• Macro Virus

9
Virus Infection
Child Support Workers
Firewall
CSE LAN
Internet
Web Server
Child Support Data
10
Virus Scanners

• Systems should have virus
  software installed and running
• Virus software must be current

11
Hacker Attacks
Child Support Workers
Firewall
CSE LAN
Internet
Web Server
Child Support Data
12
Safe Computing Tips

• Dont use illegal software
• Always write-protect your disks
• Always keep back-up copies

13
Who is Responsible?
IV-D Director Local Manager
Network/ Server/ System Administrators
Child Support Workers
14
IV-D Directors Managers

• Policy
• Security Planning
• Integrity Controls
• Staffing

• User Account Management
• Environment
• Training

15
Network/Server/System Administrators

• System security
• LAN security
• Training and awareness
• Virus prevention

16
Child Support Workers

• Computer security policy
• Security awareness

17
Who is Responsible?
IV-D Director Local Manager
Network/ Server/ System Administrators
Child Support Workers
18
Security Assessment Tool