Magaly Perez

What is segregation of duties and why is it a commonly used control? Give an example of two (e.g. IT) roles that should be segregated?

Segregation of duties is a commonly used control because it helps manage conflict of interest. It restricts the amount of power held by any one individual. This segregation creates a barrier in which helps…[Read more]

I found that when disabling the user configure login script that you must actually type 0 within the comment text for it to fully work. I know it was listed in the tech challenge however, for some reason I just disabled it the first round without typing the 0, so once I finally checked my work, I noticed I missed that step and it actually showed…[Read more]

Hey Paul,

Make sure when you entered in the script into the logon script on group policy that you browse the script instead of manually pasting in the one on the tech 4 word doc. Also, I discovered when disabling the user configure logon script that you must type 0 as well so that it fully disables the logon scrip and connects the drives…[Read more]

Hint to anyone struggling with Lab 4, please make sure to re-check the script Pat gave to us for errors ****** aka persistent lol

Hint to anyone struggling with Lab 4, please make sure to re-check the script Pat gave to us for errors ****** aka persistent lol

Yeah, no problem! Just the irony though, I was seriously complaining about how crappy chrome was acting and I discovered this article and I was like oh man. Additionally, yes I remember that haha using hackers for profit, sounds like a booming business! Thanks for the link, wish I could do the bug bounty program, especially after looking at the…[Read more]

Yeah, I think they both present risk and never said they didn’t. However, I think the network security controls are the first the priority for all businesses whether they are big or small because, that is their means of business. But, yes I agree with you alex! Thanks for your input.

4. You’ve used various computer systems in your lifetime, career. System security is complex and often maligned as cumbersome, difficult, bureaucratic, etc. Have you seen these problems in your experience? Explain

At the DA’s Office we had a protocol that passwords had to be changed very often. I believe it was about 6 times every 4 months w…[Read more]

Alex,

At the Philadelphia DA’s Office we had the same protocol however, I noticed that this resulted in employees actually writing their passwords down and keeping them on their desk because they would always forget what their password was, definitely not secure.

Hey Sean,

I answered similarly to you but I never even thought about it from that perspective of disclosure of fraud and the laws associated with it . I still agree with the way I answered the question but I definitely valued that approach of thinking based of the risk acceptance view of a company. Great insight!

Oops: must have not copied the whole question >>>>>> here is the whole question prompt: Do you believe business rely too much on administrators to configure the security protocols in programs like SAP, rather than look for security in the entire network? Explain

1. protocols in programs like SAP, rather than look for security in the entire network? Explain

I would like to believe that most businesses do not rely too much on administrators to configure their security protocols in a program, like SAP, rather than look for security in the entire network. I would think that the businesses whether they be…[Read more]

Priya*

Great post Pryia and explanation. The examples you used really bring the plans to life and make the difference so much more apparent. Great job !

1. Are the terms Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) synonyms or are they different? If they are different, what are the differences?

I think these plans are different but reliant on each other as one covers issues and situations the other does not and vice versa. Disaster Recovery Plan discusses the specific…[Read more]

http://www.technewsworld.com/story/84000.html

The article, “What Should be on the Next President’s Cyberagenda?” starts off by stating that usually cyber security is at the end of the agenda for most and that including the President of the U.S. TechNewsWorld asked experts what should be on the Presidents Cyber agenda.

-“The president has t…[Read more]

Exactly, Said!

I know if I were a business owner I would want to know that the general concepts and understandings of the ERP system are known so the people implementing those I/T controls know how to secure it or the risk associated with those functions as well as ways to mitigate potential threats.

Thanks for the input Binu. However, I mean in the entirety of the functions of ERP the IT personnel should know the flows and facets of ERPS so they are able to set up and secure networks, databases, and workstations in accordance to departments; without the in depth knowledge how are they able to understand what controls to implement and what…[Read more]

Paul,
Yes, I believe cross-training is okay for certain functions but definitely not all. I think employees should know and understand the grand scheme of these in regards to the business as a whole and everyone’s functions. The more educated they are about the processes understanding I think it would allow for a seamless flow of b…[Read more]

I figured it out, just need to change the location setting from EAST US, to EAST US 2