Updating Of Security Procedures

Published Date: 02 Nov 2017

INTRODUCTION

In this document I will be explaining different policies and guidelines that employee should follow within a company.

These policies should cover the following:

Disaster recovery policies; 

Updating of security procedures;

Scheduling of security audits;

Codes of conduct 

Software acquisition and installation policy;

Surveillance policies;

Risk management;

Budget setting

Disasters recovery policies

All the computers and server has to be backed up every day because in the event of a disaster you can recover it. This can be caused by a natural disaster such as flooding earthquake also there could be fire in the building. Also if there is power failure you will be able to recover all your data. This backup is programmed and won’t need any technician to be in the station it can be done remotely. In the event of data stolen or loss of data you recover it. In an organisation if you don’t do a backup in the event of a disaster all the staff will lose their data this will affect the company. For instance in college, schools, university it is vital that they do backup regularly to keep all students work safe. The network will be backed up every night to ensure that all of the company’s data is safe in the event of loss of data, or stolen you can recover it.

Hardware failure: This usually happens when the hardware is damage also when there is burning components. This can also occur immediately after the computer has been damaged and usually aren’t recoverable. You should always backup all your data. You don’t want to lose all your data especially in a big company; you should have a copy of aback up with all your data.

Updating of security procedures

To make sure that your server keeps running properly, every four weeks you should download the latest update which will be available for you to download to the server. Windows new updates are available to ensure the security of the server is up to date and working. These updates will be configured so that it runs every four weeks, and this will be done by a WSUS (Windows Server Update Services). Also updating the antivirus is very important because it comes with extra features which will protect your system against any threat such as viruses, Trojan, worms attack etc... This will stop people from getting access into your computer. Updating your software to latest, version of a program will give you more features. If you don’t update your software you could be vulnerable to bugs or glitches especially freeware software can contain bugs and glitches. These bugs can allow hackers to easily access the user’s computer and cause damage to the system.

Scheduling of security audits

Audits are an important procedure when analyzing a computer. Audits lets you see different information about your computer this includes software and hardware. This could be very useful for the technician who needs to check the system for different issues for example checking if the computer is compatible with different software, or other issues that may occur within an organisation. Audits can also be used to determine whether an organisation is coping and the computer is protected against any threats such as Trojan, worms attack etc.., the audits have to be thoroughly analyzed to ensure that everything are done correctly.

Codes of conduct 

Telephones are there in the company to enable staff to communicate with all the clients. If the customer has an enquiry then the staff can use the telephone to communicate with customer. All the staff should know that they shouldn’t use it for other things, only for customer’s enquiry. If a staff want to use the company’s telephone for private reasons. They should contact the manager or the supervisor to give them permissions. If you don’t follow this policy action will be taken from the manager, you can even get sacked by the company. Computer files, all employees should know that are company equipments and are to be used for company business only, and not for other things, such as talking with friends or family or go on the Internet . Employees shouldn’t use the Internet to go on any inappropriate site such pornographic site, or any Web site that contains any racism message, or bullying messages.  The company computer, internet, email, will all be monitored by the company to see what each employees are doing reading all the staff’s messages and other computer files. If you don’t follow this policy action will be taken from the manager, you can even get sacked by the company.

Software Acquisition and Installation

1. Prevention of personal and illegal software being installed on the computer, this may result in fine by the company if not followed correctly.

2. You need to avoid using; two anti-virus programs on the same computer the problem with that is it can cause conflict and prevent each other from working properly, which can leave your computer vulnerable from any viruses or attack.

3. Any freeware software must be legal and downloaded from legit sites, scan the software and test it before installing it on the system, as it may contain any malicious virus such as Trojan, worms which can cause conflict as the software might not be compatible with operating system.

Surveillance policies

The advantage of using this would be you can identify every person coming in the building it could be a thief by using a CCTV this will be good solid evidence of who did it, how and where what time of the day did that accident happened. Security guards will be monitored on the CCTV people coming in and going out of the building. This will keep the organisation safe against every threat that they may face. The security guard will be able to monitor that nobody get access to any unauthorised area in the building. An experience security guard should be aware of any threats or anything that is going on in the company around him or her. Swipe cards can be use: this will enable to staff or members in company to gain access to the building. The card will have staff sensitive information, so that every time you swipe that card it will record that information including the time you entered the building. This will also help the staff in the building they will know who is present.

Risk management

Risk management is very important in the company. If there is any hazard in the environment / workplace this can be prevented by doing a risk assessment. As an employer you should ensure that the workplace is safe for the employees. For instance in college they have to make sure that all the classrooms, and corridors is safe for not only students but for staff as well. Ensure that there are not any trip hazards. For e.g. the floor could be wet.

Budget setting

Replacing the hardware

Security audits

Training staff: It vital to train all the staff in an organisation, so they can follow the company policy use it correctly. You need to train all the staff so everyone will understand their tasks.

License for all the software or hardware

External contractors this includes 3rd party technician, cleaners

Wages for all the staff in the company.