Privacy, Laws, and Security Measures

Unlock access to all the studying documents.

View Full Document

Running head: Assignment 1 – Privacy, Laws, and Security Measures

Assignment 1

Brandon E Green

Dr. Arvay

CIS438

Strayer University

July 18, 2015

Assignment 1 – Privacy, Laws, and Security Measures 2

Introduction

As the Information Security Manager for a retail sporting goods store I am responsible

for maintaining all of the IT equipment for the store. For our store we have internal networking

equipment for an internet, intranet, email server, wireless access points throughout the store,

RFID inventory, Facebook account, e-Commerce for credit card transactions, and lastly a DMZ

established to protect our web server. It has been deemed a critical need by the CEO to analyze

data that the organization is currently collecting and maintaining. With that I have been tasked

with the researching major privacy issues, with that I will then compare them to the potential

privacy risks facing the store. I will then explain the security risks and applicable laws that

govern the privacy risk, and lastly to describe the security measures our organization should

implement to mitigate risks.

Major Privacy Issues – Organization wide

Privacy issues come in all shapes and sizes when referring to technology and data, with

that organizations that collect individual’s personal information have to be very wary of what

information they collect and hold onto. If somehow the data that had been collected over the

years became compromised, the organization would be held liable for damages and even

potential damages that could be caused. With that I would like to identify five major privacy

issues that occur to organizations in today’s society, those are Data breaches, location-based

services exploit personal information, cloud computing challenges, social media breach, and

regulatory changes [ CITATION ITB \l 1033 ].

Assignment 1 – Privacy, Laws, and Security Measures 3

As mentioned above Data breaches are an issue that every organization must deal with,

and are considered one of the most visible of the threats, though is fairly straightforward in the

preparation and follow-through. With data breaches, many would think that it involves

protecting your data from outside aggressors who would like to steal the information, though this

is a part of it, the majority of the data breaches are perpetrated internally. Insider threats have

been determined as the leading cause of data breaches for organization, these threats can be both

intentional, and non-intentional [ CITATION Gra13 \l 1033 ].

Another large privacy issue that many may overlook is location-based information, with

the advent of mobile devices and the prominent use of computers to access data both corporate