ABC University is a public university; especially known for its Faculty of Commerce and Management in the country. The faculty offers various UG and PG programmes along with research programmes viz., M. Phil and Ph.D. Re

CS Professional · Information Technology and Systems Audit · PYQS · December 2016
ABC University is a public university; especially known for its Faculty of Commerce and Management in the country. The faculty offers various UG and PG programmes along with research programmes viz., M. Phil and Ph.D. Recently, the Academic Council of the university approved the proposal of the faculty to start some UG and PG programmes in distance learning mode too. It is observed that the students of distance education are normally dependent on self-study along with a little support from the department(s) concerned. In view of this aforementioned fact, the Dean concerned of the faculty decided to launch a web based knowledge portal to facilitate the students of different courses and he proposed to upload the study materials, e-lectures, suggested answers of last examinations, mock test papers relevant for the coming examinations, etc. of the approved courses on this knowledge portal. It is expected that the portal will be very useful for the students as it aims to provide the access of various academic resources on anytime anywhere basis. For the implementation of this project, a technical consultant was appointed by the university. Accordingly, an initial feasibility study was done to know whether system should be developed in-house or bought as a ready made package and a detailed report was submitted. As a next step, as per the recommendations of the consultant, an expression of interest was published by the university in various national and regional newspapers inviting various organisations to showcase their capabilities and suggest a good solution as per the requirements of the concerned faculty of the university. Based on the above, answer the following - Information security measures must be applied to all systems in today's vulnerable environment. What are the basic system security measures, which must be applied to the proposed web based knowledge portal?

Answer & Explanation:

Basic system security measures, which must be applied to the proposed web based knowledge portal, are given as under: Password Protection: All accounts and resources must be protected by passwords. It is suggested that passwords must be at least eight characters long and should have combination of upper and lower case letters, numbers, and special characters etc. Software Updates: System must be configured to automatically update operating system software, server applications, client software, and malware protection software. For medium or high availability systems, a plan to manually apply new updates within a documented time period is an acceptable alternative. Firewall: Systems must be protected by the firewall to that allows those incoming connections necessary to fulfil the business need of that system. Client Systems, which have no business, need to provide network services must deny all incoming connections. Systems that provide network services must limit access to those services to the smallest reasonably manageable group of hosts that need to reach them. Antivirus/Malware Protection: Systems running any Operating systems must have antivirus and anti-spyware software installed and it must be configured to automatically scan and update. Regular Backups: A robust backup plan is a must to avoid any unauthorized usage and loss of data. It is advisable to take weekly backups of your complete data. Awareness: It is important to educate your users around basic network security, and protocols to be followed while accessing the application. Make sure your users understand how important you the data is, and all the measures they can take to protect it.

Topics: Information Security

Open in Interactive Practice Hub · Full Practice Hub · Chapter Weightage · More in this subject

Related Questions in this Topic