7623Ict It Write Up|Categorization Assessment Answer

Consider mechanisms to be used for IT system user authentication. Given the outcomes of the risk assessment, you should identify whether these mechanisms would be an appropriate control to improve its security posture. Also, you can describe the categorization of users into groups that may then be used for access control decisions to IT resources. Describe the access control mechanism in detail. This can be described on the level of application or database access control, i.e., restriction of certain aspects of the application (e.g., admin functionality) or of a certain piece of data (e.g., sensitive and confidential data). Server Security Consider the management and security configuration of servers. Discuss the server’s security requirements, identifying: what information it contains, and how sensitive that information is what applications it runs, how they manipulate the information stored, and how critical their availability is who has access to the system, and what type of access they have who has administrative access to the system, and how this is controlled what change management procedures are used to manage its configuration You can also consider its basic operating system and patching process to provide a suitable level of security on this server. You can research ways of hardening the O/S, as well as key applications used to suit the server’s security requirements. Software Security Consider whether critical software is used which is exposed to possible external attacks, such as software running on an externally visible web server to handle responses to forms or other dynamic data handling.