Explain the basic system of security measures to secure data from unauthorized access.

Password Protection: All accounts and resources must be protected by passwords which meet the following requirements, which must be automatically enforced by the system: (a) Must be at least eight characters long. (b) Must NOT be dictionary or common slang words in any language, or be readily guessable. (c) Must include at least three of the following four characteristics, in any order: upper case letters, lower case letters, numbers, and special characters, such as *!@#\$%^&*. (d) Must be changed at least once per year. Software Updates: Systems must be configured to automatically update operating system software, server applications (webserver, mail server, database server, etc.), client software (web browsers, mail clients, office suites, etc.), and malware protection software (antivirus, anti-spyware, etc). For Medium or High Availability systems, a plan to manually apply new updates within a documented time period is an acceptable alternative. Firewall: Systems must be protected by a firewall that allows only those incoming connections necessary to fulfill the business need of that system. Client systems which have no business need to provide network services must deny all incoming connections. Systems that provide network services must limit access to those services to the smallest reasonably manageable group of hosts that need to reach them. Malware Protection: Systems running Microsoft or Apple Operating Systems must have antivirus and anti-spyware software installed and it must be configured to automatically scan and update. Backups: System should be appropriate for quick disaster recovery and Backups should be available at regular intervals. Monitor & Audit: Use appropriate monitoring, auditing and inspection facilities and assign responsibility for reporting, evaluating, and responding to system and network events and conditions. This means that regular use of system and network monitoring tools and examine the results they produce, also use filtering and analysis tools and examine the results they produce, and learn how to response to events that warrants a response action.